Rewterz
Rewterz Threat Advisory – CVE-2020-1647 – Juniper Junos OS Double free vulnerability
July 10, 2020
Rewterz
Rewterz Threat Alert – Powerful Conti Ransomware
July 10, 2020

Rewterz Threat Advisory – CVE-2020-3974 – VMware XPC Client validation privilege escalation vulnerability

Severity

High

Analysis Summary

VMware Fusion, VMRC for Mac and Horizon Client for Mac contain a privilege escalation vulnerability due to improper XPC Client validation.Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC for Mac or Horizon Client for Mac is installed.

Impact

Privilege escalation

Affected Vendors

VMware

Affected Products

  • VMware Fusion Pro / Fusion (Fusion)
  • VMware Remote Console for Mac (VMRC for Mac)
  • VMware Horizon Client for Mac

Remediation

Refer to Vmware advisory for the complete list of affected products and respective patches.

https://www.vmware.com/security/advisories/VMSA-2020-0017.html