CVE-2020-3974: Undefined Security Weakness

VMware Fusion 11.x before 11.5.5, VMware Remote Console for Mac 11.x and prior before 11.2.0 and Horizon Client for Mac 5.x and prior before 5.4.3 contain a privilege escalation vulnerability due to improper XPC Client validation. Successful exploitation of this issue may allow attackers with...

PT-2020-4110

Name of the Vulnerable Software and Affected Versions: VMware Fusion versions 11.x before 11.5.5 VMware Remote Console for Mac versions 11.x and prior before 11.2.0 Horizon Client for Mac versions 5.x and prior before 5.4.3 Description: The issue is related to improper XPC Client validation, whic...

PT-2020-3059

Name of the Vulnerable Software and Affected Versions VMware Fusion versions 11.x before 11.5.5 VMware Remote Console for Mac versions 11.x and prior VMware Horizon Client for Mac versions 5.x and prior Description The issue is related to insufficient access control in VMware products, allowing f...

CVE-2020-3957: Time-of-check Time-of-use (TOCTOU) Race Condition

VMware Fusion 11.x before 11.5.5, VMware Remote Console for Mac 11.x and prior and VMware Horizon Client for Mac 5.x and prior contain a local privilege escalation vulnerability due to a Time-of-check Time-of-use TOCTOU issue in the service opener. Successful exploitation of this issue may allow...

CVE-2020-3950: Improper Privilege Management

VMware Fusion 11.x before 11.5.2, VMware Remote Console for Mac 11.x and prior before 11.0.1 and Horizon Client for Mac 5.x and prior before 5.4.0 contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with...

PT-2020-2666

Name of the Vulnerable Software and Affected Versions VMware Fusion versions 11.x before 11.5.2 VMware Remote Console for Mac versions 11.x and prior before 11.0.1 Horizon Client for Mac versions 5.x and prior before 5.4.0 Description The issue is due to improper use of setuid binaries, which may...