CVE-2020-3972

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-19 · updated 2026-06-17

Description

VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest File System (HGFS) implementation. Successful exploitation of this issue may allow attackers with non-admin privileges on guest macOS virtual machines to create a denial-of-service condition on their own VMs.

Affected products

VMware Tools: from 11.0.0 before 11.1.1 — fixed in 11.1.1
VMware Tools for macOS: VMware Tools for macOS (11.x.x and prior before 11.1.1)

How to fix

Upgrade to a fixed version: VMware Tools 11.1.1. Check the vendor advisory for mitigations.

References

https://www.vmware.com/security/advisories/VMSA-2020-0014.html
https://www.vmware.com/security/advisories/VMSA-2020-0014.html

Get alerted when CVE-2020-3972 or the next vulnerability affects your stack