CVE-2020-3588

A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment optimization. This vulnerability is due to improper validation of messages processed by the Cisco Webex Meetings Desktop App. A local attacker with limited privileges could exploit this vulnerability by sending malicious messages to the affected software by using the virtualization channel interface. A successful exploit could allow the attacker to modify the underlying operating system configuration, which could allow the attacker to execute arbitrary code with the privileges of a targeted user. Note: This vulnerability can be exploited only when Cisco Webex Meetings Desktop App is in a virtual desktop environment on a hosted virtual desktop (HVD) and is configured to use the Cisco Webex Meetings virtual desktop plug-in for thin clients.

• CWE-22
• CWE-22

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-vdi-qQrpBwuJPatch, Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-vdi-qQrpBwuJPatch, Vendor Advisory

Published

Nov 6, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35874An issue was discovered in the internment crate through 2020…8.1
• CVE-2020-35875An issue was discovered in the tokio-rustls crate before 0.1…7.5
• CVE-2020-35876An issue was discovered in the rio crate through 2020-05-11 …9.8
• CVE-2020-35877An issue was discovered in the ozone crate through 2020-07-0…9.8
• CVE-2020-35878An issue was discovered in the ozone crate through 2020-07-0…9.8
• CVE-2020-35879An issue was discovered in the rulinalg crate through 2020-0…9.8
• CVE-2020-35880An issue was discovered in the bigint crate through 2020-05-…9.8
• CVE-2020-35881An issue was discovered in the traitobject crate through 202…9.8
• CVE-2020-35882An issue was discovered in the rocket crate before 0.4.5 for…8.1
• CVE-2020-35883An issue was discovered in the mozwire crate through 2020-08…9.1
• CVE-2020-35884An issue was discovered in the tiny_http crate through 2020-…6.5
• CVE-2020-35885An issue was discovered in the alpm-rs crate through 2020-08…9.8