CVE-2020-3957

CVE-2020-3957 is a local privilege escalation vulnerability affecting VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior), and VMware Horizon Client for Mac (5.x and prior). The vulnerability stems from a Time-of-check Time-of-use (TOCTOU) issue in the service opener. With a CVSS score of 7.0 (HIGH), this vulnerability allows attackers with normal user privileges to escalate to root on the affected system. The attack vector is local, but the attack complexity is high, and no user interaction is required. The potential impact includes high confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, nor are there publicly available exploit codes in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one mention and one article identified, indicating low public attention.