vulnerability
VMware Fusion: Vulnerability (VMSA-2020-0020) (CVE-2020-3980)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:L/AC:H/Au:N/C:P/I:P/A:P) | Sep 16, 2020 | Oct 22, 2020 | Mar 27, 2026 |
Severity
4
CVSS
(AV:L/AC:H/Au:N/C:P/I:P/A:P)
Published
Sep 16, 2020
Added
Oct 22, 2020
Modified
Mar 27, 2026
Description
VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed.
Solution
vmware-fusion-upgrade-11_5_7
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.