CVE-2019-5524: Critical severity vmware fusion vulnerability
VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual network adapter. This issue may allow a guest to execute code on the host.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-5524?
CVE-2019-5524 is a vulnerability in VMware Workstation and Fusion that allows for an out-of-bounds write, potentially allowing a guest to execute code on the host.
How severe is CVE-2019-5524?
CVE-2019-5524 has a severity rating of 8.8 (critical).
Which software versions are affected by CVE-2019-5524?
VMware Workstation versions between 14.0.0 and 14.1.6, as well as VMware Fusion versions between 10.0.0 and 10.1.6, are affected by CVE-2019-5524.
How can this vulnerability be exploited?
This vulnerability can be exploited by a guest in the virtual machine to execute arbitrary code on the host.
Where can I find more information about CVE-2019-5524?
More information about CVE-2019-5524 can be found in the VMware Security Advisory 2019-0005, as well as on the Packet Storm Security and SecurityFocus websites.