CVE-2020-3941

Severity: high (CVSS 7.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-15 · updated 2026-06-17
Weakness: CWE-362

Description

The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed. This vulnerability is not present in VMware Tools 11.x.y since the affected functionality is not present in VMware Tools 11.

Affected products

VMware Tools: from 10.0.0 before 11.0.0 — fixed in 11.0.0
VMware Tools: VMware Tools for Windows 10.x.y

How to fix

Upgrade to a fixed version: VMware Tools 11.0.0. Check the vendor advisory for mitigations.

References

https://www.vmware.com/security/advisories/VMSA-2020-0002.html
https://www.vmware.com/security/advisories/VMSA-2020-0002.html

Get alerted when CVE-2020-3941 or the next vulnerability affects your stack