Firetruck

CVE-2020-3950

KEV

VMware Multiple Products Privilege Escalation Vulnerability

View CVE record →
Vendor / Project
VMware
Product
Multiple Products
Date added
Nov 3, 2021
Due date
May 3, 2022
Known ransomware use
Unknown
CWEs
CWE-269

Description

VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root.

Required action

Apply updates per vendor instructions.

Notes