CVE-2020-3965

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and…

published June 25, 2020

CVSS
—
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the XHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00565 · 46.2th percentile
Published
2020-06-25T14:54Z
EPSS history
Timeline
  • 25 JUN 14:54Z
    VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and…
    cvelistv5