High severity7.8CISA KEVNVD Advisory· Published Mar 17, 2020· Updated Jun 17, 2026

CVE-2020-3950

Description

VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC or Horizon Client is installed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Fusion2 versions
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: >=11.0.0,<11.5.2
- (no CPE)range: <11.5.2
VMware/Horizon View Client
cpe:2.3:a:vmware:horizon_client:*:*:*:*:*:*:*:*
Range: >=5.0.0,<5.4.0
VMware/Remote Console
cpe:2.3:a:vmware:remote_console:*:*:*:*:*:*:*:*
Range: >=11.0.0,<11.0.1
VMware/Fusiondescription
VMware/Remote Console for Macllm-fuzzy
Range: <11.0.1
VMware/Horizon Client for Macllm-fuzzy
Range: <5.4.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/156843/VMware-Fusion-11.5.2-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/157079/VMware-Fusion-USB-Arbitrator-Setuid-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB Entry
www.vmware.com/security/advisories/VMSA-2020-0005.htmlnvdVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.006
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.000