CVE-2020-3972: VMware Tools

Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.

VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest File System (HGFS) implementation. Successful exploitation of this issue may allow attackers with non-admin privileges on guest macOS virtual machines to create a denial-of-service condition on their own VMs.

Affected products

• VMware Tools: from 11.0.0, before 11.1.1 (fixed in 11.1.1)

Published 2020-06-19. Last modified 2026-06-17.