CVE-2020-3969

CVE-2020-3969 is an off-by-one heap-overflow vulnerability in the SVGA device of VMware ESXi, Workstation, and Fusion. A malicious actor with local access to a virtual machine with 3D graphics enabled could potentially exploit this to execute code on the hypervisor. This vulnerability has a CVSS score of 7.8 (HIGH), indicating a significant impact with high confidentiality, integrity, and availability concerns, though exploitation requires additional conditions beyond the attacker's control and has high attack complexity. There is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting it is not widely targeted.