CVE Watch—

CVE-2020-3950

VMware Multiple Products Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

7.3%

p94

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

7.3%EPSS · 30 days7.3%

2026-06-302026-07-16

KEV catalog record

Product

VMware / Multiple Products

Vulnerability

VMware Multiple Products Privilege Escalation Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Summary description

VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-3950

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2022-22960—

98.3%

KEV—80VMware Multiple Products Privilege Escalation Vulnerability—CVE-2020-4006—

97.6%

KEV—79Multiple VMware Products Command Injection Vulnerability—