Evaluating EPP in the Time of XDR

The endpoint detection and response EDR market is not only more critical than ever, it is also going through the biggest period of innovation in its history – bigger than when EDR was first introduced by Carbon Black 7 years ago. This next wave of innovation is about extending EDR beyond the...

CVE-2020-3950: Improper Privilege Management

VMware Fusion 11.x before 11.5.2, VMware Remote Console for Mac 11.x and prior before 11.0.1 and Horizon Client for Mac 5.x and prior before 5.4.0 contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with...

CVE-2020-3951: Out-of-bounds Write

VMware Workstation 15.x before 15.5.2 and Horizon Client for Windows 5.x and prior before 5.4.0 contain a denial-of-service vulnerability due to a heap-overflow issue in Cortado Thinprint. Attackers with non-administrative access to a guest VM with virtual printing enabled may exploit this issue ...

PT-2020-2666

Name of the Vulnerable Software and Affected Versions VMware Fusion versions 11.x before 11.5.2 VMware Remote Console for Mac versions 11.x and prior before 11.0.1 Horizon Client for Mac versions 5.x and prior before 5.4.0 Description The issue is due to improper use of setuid binaries, which may...

VMware Workstation, Fusion, VMware Remote Console and Horizon Client updates address privilege escalation and denial-of-service vulnerabilities (CVE-2020-3950, CVE-2020-3951)

3a. Privilege escalation vulnerability via setuid binaries CVE-2020-3950 VMware Fusion, VMRC for Mac and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries. VMware has evaluated the severity of this issue to be in the Important severity rang...

VMware Workstation Virtual Printer Elevation of Privilege Vulnerability

VMware Workstation is a desktop virtual computing software from VMware. A security vulnerability exists in the Virtual Printer module in VMware Workstation that stems from the program not validating a shared file submitted by a user before loading the path. An attacker could exploit the...

VMware Fusion USB Arbitrator Setuid Privilege Escalation

This exploits an improper use of setuid binaries within VMware Fusion 10.1.3 - 11.5.3. The Open VMware USB Arbitrator Service can be launched outide of its standard path which allows loading of an attacker controlled binary. By creating a payload in the user home directory in a specific folder, a...

Unspecified Vulnerability in VMware Horizon Client, Remote Console, and Workstation

VMware Workstation and VMware Horizon are both products of VMware, Inc. VMware Workstation is a suite of virtual machine software. VMware Workstation is a suite of virtual machine software that provides the ability to run multiple virtual machines with different operating systems at the same...

VMware Workstation vmnetdhcp.exe Component Resource Management Error Vulnerability

VMware Workstation is a desktop virtual computing software from VMware. A resource management error vulnerability exists in the vmnetdhcp.exe component of VMware Workstation, which stems from the program failing to verify the existence of an object before performing operations on it. An attacker...

PT-2020-2667

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 15.x before 15.5.2 Horizon Client for Windows versions 5.x and prior before 5.4.0 Description The issue is related to a heap-overflow problem in the Cortado Thinprint component, which can be exploited to create a...

VMWare Fusion - Local Privilege Escalation

VMWare Fusion - Local Privilege Escalation Local Privilege Escalation via VMWare Fusion Overview: A directory traversal vulnerability in VMware Fusion's SUID binaries can allow an attacker to run commands as the root user. Tested Versions: VMware Fusion 10.1.3 9472307 on macOS 10.13.6 VMware Fusi...

CVE-2020-3950

VMware Fusion 11.x before 11.5.2, VMware Remote Console for Mac 11.x and prior before 11.0.1 and Horizon Client for Mac 5.x and prior before 5.4.0 contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with...

VMWare Fusion - Local Privilege Escalation

Local Privilege Escalation via VMWare Fusion Overview: A directory traversal vulnerability in VMware Fusion's SUID binaries can allow an attacker to run commands as the root user. Tested Versions: VMware Fusion 10.1.3 9472307 on macOS 10.13.6 VMware Fusion 11.0.0 10120384 on macOS 10.14.1 VMware...

KLA12095 DoS vulnerability in VMWare Workstation and Player

A denial of service vulnerability was found in VMWare Workstation and Player. Malicious users can exploit this vulnerability to cause denial of service. Original advisories VMSA-2020-0005 Exploitation Related products VMware-Workstation VMware-Player CVE list CVE-2020-3951 warning Solution Update...

CVE-2019-5543

For VMware Horizon Client for Windows 5.x and prior before 5.3.0, VMware Remote Console for Windows 10.x before 11.0.0, VMware Workstation for Windows 15.x before 15.5.2 the folder containing configuration files for the VMware USB arbitration service was found to be writable by all users. A local...

CVE-2020-3948

Linux Guest VMs running on VMware Workstation 15.x before 15.5.2 and Fusion 11.x before 11.5.2 contain a local privilege escalation vulnerability due to improper file permissions in Cortado Thinprint. Local attackers with non-administrative access to a Linux guest VM with virtual printing enabled...

CVE-2019-5543

For VMware Horizon Client for Windows 5.x and prior before 5.3.0, VMware Remote Console for Windows 10.x before 11.0.0, VMware Workstation for Windows 15.x before 15.5.2 the folder containing configuration files for the VMware USB arbitration service was found to be writable by all users. A local...

CVE-2020-3947

VMware Workstation 15.x before 15.5.2 and Fusion 11.x before 11.5.2 contain a use-after vulnerability in vmnetdhcp. Successful exploitation of this issue may lead to code execution on the host from the guest or may allow attackers to create a denial-of-service condition of the vmnetdhcp service...

CVE-2020-3948

Linux Guest VMs running on VMware Workstation 15.x before 15.5.2 and Fusion 11.x before 11.5.2 contain a local privilege escalation vulnerability due to improper file permissions in Cortado Thinprint. Local attackers with non-administrative access to a Linux guest VM with virtual printing enabled...

CVE-2020-3947

VMware Workstation 15.x before 15.5.2 and Fusion 11.x before 11.5.2 contain a use-after vulnerability in vmnetdhcp. Successful exploitation of this issue may lead to code execution on the host from the guest or may allow attackers to create a denial-of-service condition of the vmnetdhcp service...