CVE-2020-3989

CVE-2020-3989 is a denial-of-service vulnerability affecting VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4). It stems from an out-of-bounds write in the Cortado ThinPrint component, allowing a malicious actor with normal VM access to cause a partial denial-of-service on the host system. Exploitation requires virtual printing to be enabled, which is default for Horizon Client but not Workstation. This vulnerability has a low CVSS score of 3.3, indicating a low attack complexity and impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.