---
id: 4667
title: "Chaining N-days to Compromise All: Part 4 — VMware Workstation Information leakage"
source_domain: theori.io
source_url: "https://theori.io/blog/chaining-n-days-to-compromise-all-part-4-vmware-workstation-information-leakage"
published_at: "2024-04-17T15:00:00Z"
tags: ["vmware", "bluetooth", "usb", "cve-2023-34044", "information-leak"]
phying_url: "https://phying.com/item/4667"
lang: en
---

# Chaining N-days to Compromise All: Part 4 — VMware Workstation Information leakage

## Summary

Part four of the chain: CVE-2023-34044, Theori’s variant of CVE-2023-20870 in VMware’s virtual Bluetooth device, leaks critical information from the host process via malformed USB request blocks.

## Intelligence Metadata

- **Sources:** theori.io
- **Published:** 2024-04-17T15:00:00Z
- **Original:** https://theori.io/blog/chaining-n-days-to-compromise-all-part-4-vmware-workstation-information-leakage
- **Phying News:** https://phying.com/item/4667