CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-03-17
VMware Fusion and Clients for macOS Local Privilege Escalation Vulnerability (CVE-2020-3950) Technical Advisory
[Affected Scope] VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1), and Horizon Client for Mac (5.x and prior before 5.4.0)
[Impact] Local attackers with standard user privileges can exploit improper setuid binary execution to escalate privileges to root, gaining full administrative control over the macOS system
[Mitigation] Immediately upgrade to the patched versions (Fusion 11.5.2+, VMRC 11.0.1+, Horizon Client 5.4.0+) or restrict setuid permissions on vulnerable binaries