High severity7.0NVD Advisory· Published May 29, 2020· Updated Jun 17, 2026

CVE-2020-3957

Description

VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-of-check Time-of-use (TOCTOU) issue in the service opener. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC and Horizon Client are installed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Fusion2 versions
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: >=11.0.0,<11.5.5
- (no CPE)range: <11.5.5
VMware/Horizon View Client
cpe:2.3:a:vmware:horizon_client:*:*:*:*:*:*:*:*
Range: <=5.4.0
VMware/Remote Console
cpe:2.3:a:vmware:remote_console:*:*:*:*:*:*:*:*
Range: <=11.0.1
VMware/Remote Console for Macllm-fuzzy
Range: <=11.x
VMware/Horizon Client for Macllm-fuzzy2 versions
<=5.x+ 1 more
- (no CPE)range: <=5.x
- (no CPE)range: 5.x and prior
VMware/VMware Fusionv5
Range: 11.x before 11.5.5
VMware/VMware Remote Consolecpe-rescue
Range: V11.x and prior

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2020-3957

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions