High severity7.8NVD Advisory· Published Jul 10, 2020· Updated Jun 17, 2026

CVE-2020-3974

Description

VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior before 5.4.3) contain a privilege escalation vulnerability due to improper XPC Client validation. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMware Remote Console for Mac or Horizon Client for Mac is installed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Fusion2 versions
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: >=11.0.0,<11.5.5
- (no CPE)range: <11.5.5
VMware/Horizon View Client
cpe:2.3:a:vmware:horizon_client:*:*:*:*:*:*:*:*
Range: >=5.0.0,<5.4.3
VMware/Remote Console
cpe:2.3:a:vmware:remote_console:*:*:*:*:*:*:*:*
Range: >=11.0.0,<11.2.0
VMware/Fusiondescription
VMware/Remote Console for Macllm-fuzzy
Range: <11.2.0
VMware/Horizon Client for Macllm-fuzzy
Range: <5.4.3

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2020-3974

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions