CVE-2020-3980

MEDIUM

VMware Fusion 11.x < 12.0.0 - Privilege Escalation via System Wide Path Configuration

Title source: llm
STIX 2.1

Description

VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed.

References (1)

Core 1
Core References

Scores

CVSS v3 6.7
EPSS 0.0011
EPSS Percentile 28.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
vmware/fusion 11.0.0 - 12.0.0
Published Sep 16, 2020
Tracked Since Feb 18, 2026