What is CVE-2020-3941?

CVE-2020-3941 is a high-severity vulnerability in Microsoft Windows, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.0/10. Published 2020-01-15.

How severe is CVE-2020-3941?

High severity. CVSS v3 base score is 7.0 out of 10.

Vulnerability in Microsoft Windows

CVE-2020-3941

The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed. This vulnerability is not present in VMware Tools 11.x.y since the affected functionality is not present in VMware Tools 11.

Vulnerability class: Race Condition

EPSS: 0.003 (23.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Microsoft Windows
Vmware Tools
Vmware Tools For Windows (Vmware Tools) — versions VMware Tools for Windows 10.x.y

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

References

security@vmware.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-3941?: CVE-2020-3941 is a high-severity vulnerability in Microsoft Windows, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.0/10. Published 2020-01-15.
How severe is CVE-2020-3941?: High severity. CVSS v3 base score is 7.0 out of 10.