VULNERABILITY INTELLIGENCE

CVE-2020-3980

CVSS score6.7 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2020-09-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references