CVE-2020-3947

HIGH

VMware Workstation <15.5.2, Fusion <11.5.2 - Use After Free

Title source: llm
STIX 2.1

Description

VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp. Successful exploitation of this issue may lead to code execution on the host from the guest or may allow attackers to create a denial-of-service condition of the vmnetdhcp service running on the host machine.

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0017
EPSS Percentile 37.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (2)
vmware/fusion 11.0.0 - 11.5.2
vmware/workstation 15.0.0 - 15.5.2
Published Mar 16, 2020
Tracked Since Feb 18, 2026