Information Leak in VMware ESXi, Workstation, and Fusion Products

CVE-2020-3964

Summary

VMware ESXi, Workstation, and Fusion products are susceptible to an information leak through the EHCI USB controller. An attacker with local access to a virtual machine could potentially gain read access to sensitive information stored in the hypervisor's memory. However, successful exploitation requires additional specific conditions to be met, making it a targeted risk for users operating these platforms.

References