Not rated
CVE-2020-3957 VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac…
Description
VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-of-check Time-of-use (TOCTOU) issue in the service opener. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC and Horizon Client are installed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Fusion | Versions not published | |
| VMware Remote Console for Mac | Versions not published | |
| VMware Horizon Client for Mac | Versions not published |
Other CVEs of VMware Fusion
The 7 CVEs of VMware Fusion →
CVE-2026-59347
VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS
8.1
High
CVE-2026-59346
VMware Workstation and Fusion contain an integer-overflow vulnerability
9.3
Critical
CVE-2020-3959
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before…
Not rated
CVE-2020-3958
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before…
Not rated