The 2023 Pwnie Winner For Best Privilege Escalation Bug

URB Excalibur: Slicing Through the Gordian Knot of VMware VM Escapes

@danis_jiang and @0x140ceURB

https://www.vmware.com/security/advisories/VMSA-2022-0033.html) This team successfully performed VM escapes across all VMware virtual machine products: Workstation, Fusion, and ESXi (within the sandbox), making it the only VMware VM escape at pwn2own last year. We love this because VMware escapes are really difficult, and these guys managed to find one. … It’s very hard work to do, they pulled it off – props.