Local Privilege Escalation Vulnerability in VMware Fusion and Horizon Client

CVE-2020-3957

What is CVE-2020-3957?

VMware Fusion versions earlier than 11.5.5, as well as VMware Remote Console for Mac and VMware Horizon Client for Mac versions 5.x and earlier, are susceptible to a local privilege escalation vulnerability stemming from a Time-of-check Time-of-use (TOCTOU) issue in the service opener. An attacker with standard user privileges could exploit this vulnerability to gain elevated privileges, potentially compromising the integrity and security of the affected system.

References