CVE-2020-3957: vulnerability in VMware Fusion
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.2%
VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-of-check Time-of-use (TOCTOU) issue in the service opener. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC and Horizon Client are installed.
Affected products
VMware · VMware FusionVMware · VMware Horizon Client for MacVMware · VMware Remote Console for MacRelated CVEs — VMware Fusion
In the same product, most dangerous first.
CVE-2019-5514—CVE-2019-5514EPSS 3.5%CVE-2019-5521—CVE-2019-5521EPSS 1.6%CVE-2020-3958—CVE-2020-3958EPSS 0.5%CVE-2026-59346CRITICALVMware Workstation and Fusion VMXNET3 integer-overflow vulnerabilityEPSS 0.4%CVE-2020-3959—CVE-2020-3959EPSS 0.3%CVE-2026-59347HIGHVMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerabilityEPSS 0.2%