[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2476el_i10XxPnrRZIn-3wL6EHGvqKTdeVmfsDOMBQk":3,"g5a-risk:CVE-2020-3950":169},{"success":4,"data":5,"meta":167},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":26,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":65,"references":66,"referencesCount":92,"weaknesses":93,"weaknessesCount":101,"isActivelyExploited":4,"cisaInfo":102,"otxData":26,"relatedBlogPosts":103,"seoMetadata":104,"configurations":129,"relatedVendorCves":151,"notableEvents":152},"CVE-2020-3950","What is CVE-2020-3950?","VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC or Horizon Client is installed.","VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) cont...","2020-03-17T19:15:12.05","2025-10-22T00:17:08.4",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":25,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":44,"ObtainAllPrivilege":44,"ObtainUserPrivilege":44,"ObtainOtherPrivilege":44,"UserInteractionRequired":44},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":41,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",7.2,"",3.9,10,false,0.07254,[45,45,45,45,45,45,45],"High",[49,54,57,60],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"vmware","fusion","*","cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",{"vendor":50,"product":55,"version":52,"criteria":56,"vulnerable":4},"horizon_client","cpe:2.3:a:vmware:horizon_client:*:*:*:*:*:*:*:*",{"vendor":50,"product":58,"version":52,"criteria":59,"vulnerable":4},"remote_console","cpe:2.3:a:vmware:remote_console:*:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":44},"apple","macos","-","cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",4,[67,74,77,82,84,86,88],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F156843\u002FVMware-Fusion-11.5.2-Privilege-Escalation.html","Packetstormsecurity",[71,72,73],"Exploit","Third Party Advisory","VDB Entry",{"url":75,"source":69,"tags":76},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F157079\u002FVMware-Fusion-USB-Arbitrator-Setuid-Privilege-Escalation.html",[71,72,73],{"url":78,"source":79,"tags":80},"https:\u002F\u002Fwww.vmware.com\u002Fsecurity\u002Fadvisories\u002FVMSA-2020-0005.html","Vmware",[81],"Vendor Advisory",{"url":68,"source":69,"tags":83},[71,72,73],{"url":75,"source":69,"tags":85},[71,72,73],{"url":78,"source":79,"tags":87},[81],{"url":89,"source":90,"tags":91},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3950","CISA",[],7,[94],{"id":95,"name":96,"description":97,"extendedDescription":41,"status":98,"abstraction":99,"structure":100},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","Draft","Class","Simple",1,{"shortDescription":41,"requiredAction":41,"vulnerabilityName":41,"dateAdded":26},[],{"title":105,"metaDescription":106,"keywords":107,"canonicalUrl":108,"structuredData":109},"What is CVE-2020-3950? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-3950, a high severity cyber security vulnerability from 2020. VMware Fusion (11.x before 11.5.2), VMware Remote Console fo...","CVE-2020-3950, CVE-2020-3950 vulnerability, CVE-2020-3950 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, vmware security, apple security, fusion vulnerability, horizon_client vulnerability, remote_console vulnerability, macos vulnerability","\u002Fwhat-is\u002Fcve-2020-3950",{"@context":110,"@type":111,"headline":105,"description":106,"datePublished":10,"dateModified":11,"author":112,"publisher":116,"about":120,"mainEntityOfPage":124,"articleSection":127,"keywords":128},"https:\u002F\u002Fschema.org","TechArticle",{"@type":113,"name":114,"url":115},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":113,"name":114,"url":115,"logo":117},{"@type":118,"url":119},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":121,"name":6,"description":122,"additionalType":123},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":125,"@id":126},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-3950","Cybersecurity","CVE-2020-3950, CVE-2020-3950 vulnerability, CVE-2020-3950 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[130],{"Operator":131,"Negate":26,"Nodes":132},"AND",[133,147],{"Operator":134,"Negate":44,"CPEMatch":135},"OR",[136,140,144],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":138,"VersionEndExcluding":139,"VersionEndIncluding":26},"A7448F9A-9D9B-47BC-ACD1-18199A70D148","11.0.0","11.5.2",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":141,"VersionStartExcluding":26,"VersionStartIncluding":142,"VersionEndExcluding":143,"VersionEndIncluding":26},"4F835663-B6E8-41FB-BDE0-C847E9086448","5.0.0","5.4.0",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":145,"VersionStartExcluding":26,"VersionStartIncluding":138,"VersionEndExcluding":146,"VersionEndIncluding":26},"7395721C-7903-4336-AD4C-D5544CF4AC10","11.0.1",{"Operator":134,"Negate":44,"CPEMatch":148},[149],{"Vulnerable":44,"Criteria":64,"MatchCriteriaID":150,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"387021A0-AF36-463C-A605-32EA7DAC172E",[],[153,160],{"id":154,"eventType":155,"eventTime":156,"details":157,"label":158,"color":159},"07420bb0-32b5-4990-b987-59aec2910fa4","LOW_EPSS_DELTA","2025-11-19T04:06:14.968137+00:00","Daily EPSS score decreased by 0.132 on 2023-12-30","EPSS Score Decreased","green",{"id":161,"eventType":162,"eventTime":163,"details":164,"label":165,"color":166},"f6faf7d2-4e7a-4c0f-842e-742ef7d93da8","HIGH_EPSS_DELTA","2025-11-22T04:06:02.698209+00:00","Daily EPSS score increased by 0.132 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":168,"version":37},1792249100340,{"score":170,"band":47,"action":171,"scoredAt":172},74,"Emergency patch","2026-10-16T06:48:05.126903+00:00"]