CVE-2020-3962

Katalog CVE

CVSS 8.2 · High EPSS 0,60%

Kerentanan Use After Free pada vmware cloud foundation, vmware fusion +2 lainnya. Skor CVSS 3.1 8.2 (High) menurut NVD.

Deskripsi (NVD)

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a use-after-free vulnerability in the SVGA device. A malicious actor with local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine.

Rincian

Terbit di NVD

24 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.2 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,60% peluang dieksploitasi; lebih tinggi dari 47,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 180 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.vmware.com/security/advisories/VMSA-2020-0015.html advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-20-785/ advisory pihak ketiga