CVE-2020-3941

The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed. This vulnerability is not present in VMware Tools 11.x.y since the affected functionality is not present in VMware Tools 11.

Score

CVSS 3.1 7.0 High

Status

Modified - security@vmware.com

Published

2020-01-15

Last modified

2024-08-04

Weaknesses

CWE-362

Affected products

• Tools (Vmware)
• Vmware Tools For Windows Vmware Tools (Vmware)

References

• https://www.vmware.com/security/advisories/VMSA-2020-0002.html