ZDI-23-487: (Pwn2Own) Oracle VirtualBox TPM MMIO Handling Stack-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability.

attackers buffer buffer overflow code escalation exploit handling high local local privilege escalation oracle order overflow privilege privileged privilege escalation privileges pwn2own stack system target tpm virtualbox vulnerability zdi