Privilege Escalation Vulnerability in VMware Fusion (11.x) Allows Execution of Malicious Code

Privilege Escalation Vulnerability in VMware Fusion (11.x) Allows Execution of Malicious Code

CVE-2020-3980 · MEDIUM Severity

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed.

Learn more about our User Device Pen Test.