Unscored

CVE-2020-3959

VMware VMware ESXi; VMware VMware Workstation; VMware VMware Fusion Published: 2020-05-29 22:49 (6 years ago)

Description

VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1.0) contain a memory leak vulnerability in the VMCI module. A malicious actor with local non-administrative access to a virtual machine may be able to crash the virtual machine's vmx process leading to a partial denial of service.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
VMware	VMware ESXi	6.7 before ESXi670-202004101-SG, 6.5 before ESXi650-202005401-SG
VMware	VMware Fusion	11.x before 11.1.0
VMware	VMware Workstation	15.x before 15.1.0

References and patches

https://www.vmware.com/security/advisories/VMSA-2020-0011.html

CVSS score

Not scored yet. It appears here once the CNA, CISA or NVD scores it.

EPSS (chance of exploitation in 30 days)

0.32%

higher than 25% of all CVEs

Timeline

ID reserved2019-12-30
Published2020-05-29 22:49
Reached IP-DB2026-10-25 00:05
Last updated2024-08-04 10:52

Assigned by (CNA): vmware

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — VMware ESXi / vCenter

2.7Low

CVE-2026-41709 KEV 3 months ago

ESX insufficient logging vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware ESX; VMware Telco Cloud Platform

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

7.6High

CVE-2026-41703 3 months ago

Out-of-bounds read vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware ESX; VMware Workstation

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condit…

9.3Critical

CVE-2026-47876 3 months ago

VMXNET3 out-of-bounds write vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware ESX; VMware Telco Cloud Platform

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the hos…

9.8Critical

CVE-2026-59309 3 months ago

vCenter authentication-bypass vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware vCenter; VMware Telco Cloud Infrastructure

VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.

9.8Critical

CVE-2026-59310 KEV Used in ransomware 3 months ago

vCenter directory-traversal vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware vCenter; VMware Telco Cloud Infrastructure

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

62%EPSS

8.0High

CVE-2026-41724 5 months ago

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

VMware VCF operations; VMware VMware Aria Operations; VMware VMware Telco Cloud Platform

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Founda…