← Back to browse · API

CVE-2020-3950

Severity
HIGH
CVSS
7.8
EPSS
0.07254
Risk score
58.74
CISA KEV
Yes
PoC
No
Published
2021-11-03
Modified
2021-11-03
First seen
2026-08-07
Aliases
EUVD-2020-25215, GHSA-FX3W-HJ7J-HFGF
Products
VMware:Multiple Products, n/a:VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0)
Sources
euvd EUVD-2020-25215
cisa.gov CVE-2020-3950

Description

VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root.

References