CVE-2020-3948

HIGH

VMware Workstation/Fusion <15.5.2-11.5.2 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vulnerability due to improper file permissions in Cortado Thinprint. Local attackers with non-administrative access to a Linux guest VM with virtual printing enabled may exploit this issue to elevate their privileges to root on the same guest VM.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 7.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-732
Status published
Products (2)
vmware/fusion 11.0.0 - 11.5.2
vmware/workstation 15.0.0 - 15.5.2
Published Mar 16, 2020
Tracked Since Feb 18, 2026