All vulnerabilities

Servers and applications

CVE-2020-3999

VMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x prior to 15.5.7), VMware Fusion (12.x prior to 12.0 and 11.x prior to 11.5.7) and VMware Cloud Foundation contain a denial of service vulnerability due to improper input validation in GuestInfo. A malicious actor with normal user privilege access to a virtual machine can crash the virtual machine's vmx…

Severity
Medium 6.5
Published
21 Dec 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
VMware ESXiServers and applications · cpe:o:vmware:esxi
  • Version 7.0-beta
  • Version 7.0-update_1a
  • Version 7.0-update_1b
  • Version 7.0
  • Version 7.0-update_1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-3999
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-3999