Vulnerability Details CVE-2019-5526
VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.124
EPSS Ranking 93.5%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 9.3
References
- http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html
- http://www.securityfocus.com/bid/108333
- https://www.vmware.com/security/advisories/VMSA-2019-0007.html
- http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html
- http://www.securityfocus.com/bid/108333
- https://www.vmware.com/security/advisories/VMSA-2019-0007.html
Products affected by CVE-2019-5526
-
cpe:2.3:a:vmware:workstation:15.0.0
-
cpe:2.3:a:vmware:workstation:15.0.1
-
cpe:2.3:a:vmware:workstation:15.0.2
-
cpe:2.3:a:vmware:workstation:15.0.3
-
cpe:2.3:a:vmware:workstation:15.0.4