CVE-2019-5512
First published: Tue Apr 09 2019(Updated: )
VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately. Successful exploitation of this issue may allow hijacking of COM classes used by the VMX process, on a Windows host, leading to elevation of privilege.
Credit: security@vmware.com security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Workstation | >=14.0.0<14.1.6 | |
| VMware Workstation | >=15.0.0<15.0.3 | |
| Microsoft Windows | ||
| All of | ||
| Any of | ||
| VMware Workstation | >=14.0.0<14.1.6 | |
| VMware Workstation | >=15.0.0<15.0.3 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-5512?
CVE-2019-5512 has a medium severity rating due to its potential for privilege escalation.
How do I fix CVE-2019-5512?
To fix CVE-2019-5512, update VMware Workstation to version 15.0.3 or later, or 14.1.6 or later.
What products are affected by CVE-2019-5512?
CVE-2019-5512 affects VMware Workstation versions 15.x prior to 15.0.3 and 14.x prior to 14.1.6 running on Windows.
Can CVE-2019-5512 be exploited remotely?
CVE-2019-5512 cannot be exploited remotely; it requires local access to the vulnerable machine.
What are the potential impacts of CVE-2019-5512?
The exploitation of CVE-2019-5512 may lead to unauthorized elevation of privileges on the affected Windows host.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/references
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/event
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/vmware
- canonical/vmware workstation
- version/vmware workstation/14.0.0
- version/vmware workstation/15.0.0
- vendor/microsoft
- canonical/microsoft windows