CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-5519

VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10.1.6) contain a Time-of-check Time-of-use (TOCTOU) vulnerability in the virtual USB 1.1 UHCI (Universal Host Controller Interface). Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This issue may allow a guest to execute code on the host.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.4%

CVSS Severity

CVSS v3 Score 6.8

CVSS v2 Score 7.2

References

Products affected by CVE-2019-5519

Vmware » Fusion » Version: 10.0.0

cpe:2.3:a:vmware:fusion:10.0.0
Vmware » Fusion » Version: 10.0.1

cpe:2.3:a:vmware:fusion:10.0.1
Vmware » Fusion » Version: 10.1.0

cpe:2.3:a:vmware:fusion:10.1.0
Vmware » Fusion » Version: 10.1.1

cpe:2.3:a:vmware:fusion:10.1.1
Vmware » Fusion » Version: 10.1.2

cpe:2.3:a:vmware:fusion:10.1.2
Vmware » Fusion » Version: 10.1.3

cpe:2.3:a:vmware:fusion:10.1.3
Vmware » Fusion » Version: 10.1.4

cpe:2.3:a:vmware:fusion:10.1.4
Vmware » Fusion » Version: 10.1.5

cpe:2.3:a:vmware:fusion:10.1.5
Vmware » Fusion » Version: 11.0.0

cpe:2.3:a:vmware:fusion:11.0.0
Vmware » Fusion » Version: 11.0.1

cpe:2.3:a:vmware:fusion:11.0.1
Vmware » Fusion » Version: 11.0.2

cpe:2.3:a:vmware:fusion:11.0.2
Vmware » Workstation » Version: 14.0.0

cpe:2.3:a:vmware:workstation:14.0.0
Vmware » Workstation » Version: 14.1

cpe:2.3:a:vmware:workstation:14.1
Vmware » Workstation » Version: 14.1.0

cpe:2.3:a:vmware:workstation:14.1.0
Vmware » Workstation » Version: 14.1.1

cpe:2.3:a:vmware:workstation:14.1.1
Vmware » Workstation » Version: 14.1.2

cpe:2.3:a:vmware:workstation:14.1.2
Vmware » Workstation » Version: 14.1.3

cpe:2.3:a:vmware:workstation:14.1.3
Vmware » Workstation » Version: 14.1.4

cpe:2.3:a:vmware:workstation:14.1.4
Vmware » Workstation » Version: 14.1.5

cpe:2.3:a:vmware:workstation:14.1.5
Vmware » Workstation » Version: 14.1.6

cpe:2.3:a:vmware:workstation:14.1.6
Vmware » Workstation » Version: 15.0.0

cpe:2.3:a:vmware:workstation:15.0.0
Vmware » Workstation » Version: 15.0.1

cpe:2.3:a:vmware:workstation:15.0.1
Vmware » Workstation » Version: 15.0.2

cpe:2.3:a:vmware:workstation:15.0.2
Vmware » Workstation » Version: 15.0.3

cpe:2.3:a:vmware:workstation:15.0.3
Vmware » Esxi » Version: 6.0

cpe:2.3:o:vmware:esxi:6.0
Vmware » Esxi » Version: 6.5

cpe:2.3:o:vmware:esxi:6.5
Vmware » Esxi » Version: 6.7

cpe:2.3:o:vmware:esxi:6.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-5519

Products

Pricing

Contact Us