CVE-2020-4004

HIGH

VMware Fusion 11.0-11.5.6 - Use-After-Free in XHCI USB Controller

Title source: llm
STIX 2.1

Description

VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstation (15.x before 15.5.7), Fusion (11.x before 11.5.7) contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.vmware.com/security/advisories/VMSA-2020-0026.html

Scores

CVSS v3 8.2
EPSS 0.0037
EPSS Percentile 58.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (2)
vmware/cloud_foundation 3.0 - 3.10.1.2
vmware/esxi 6.5 (49 CPE variants)
Published Nov 20, 2020
Tracked Since Feb 18, 2026