CVE-2020-3957

CVE-2020-3957: falha em VMware Fusion

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Fusion+ Monitorar Horizon Client

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.2%
VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-of-check Time-of-use (TOCTOU) issue in the service opener. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC and Horizon Client are installed.
Produtos afetados
VMware · VMware FusionVMware · VMware Horizon Client for MacVMware · VMware Remote Console for Mac
CVEs relacionadas — VMware Fusion

No mesmo produto, das mais perigosas para as menos.

CVE-2019-5514—CVE-2019-5514EPSS 3.5%CVE-2019-5521—CVE-2019-5521EPSS 1.6%CVE-2020-3958—CVE-2020-3958EPSS 0.5%CVE-2026-59346CRITICALVMware Workstation and Fusion VMXNET3 integer-overflow vulnerabilityEPSS 0.4%CVE-2020-3959—CVE-2020-3959EPSS 0.3%CVE-2026-59347HIGHVMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerabilityEPSS 0.2%