VYPR
← All advisories
High severity8.4NVD Advisory· Published Sep 15, 2021· Updated Jun 17, 2026

CVE-2020-3960

CVE-2020-3960

Description

VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a virtual machine with a virtual NVMe controller present may be able to read privileged information contained in physical memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

26
  • VMware/Fusion2 versions
    cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: >=11.0.0,<11.5.5
    • (no CPE)range: < 11.5.5
  • VMware/Workstation2 versions
    cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*range: >=15.0.0,<15.5.5
    • (no CPE)range: < 15.5.5
  • VMware/Vsphere Esxi21 versions
    cpe:2.3:o:vmware:vsphere_esxi:6.5:-:*:*:*:*:*:*+ 20 more
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:-:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201701001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201703001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201703002:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201704001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201710001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201712001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201803001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201806001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201808001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201810001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201810002:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201811001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201901001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201903001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201905001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201908001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201910001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.7:-:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.7:670-201911001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:vsphere_esxi:6.7:670-202004001:*:*:*:*:*:*
  • VMware/Esxillm-fuzzy
    Range: < ESXi670-202006401-SG, < ESXi650-202005401-SG

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.