CVE-2020-3980: VMware Fusion

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed.

Affected products

• VMware Fusion: from 11.0.0, before 12.0.0 (fixed in 12.0.0)

Published 2020-09-16. Last modified 2026-06-17.