CVE-2019-5511

—

CVSS 3.0

8.8 high

EPSS

<1%p31

Published

Apr 9, 2019 (Apr 9, 2019)

Modified

Jun 17, 2026

Description

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Successful exploitation of this issue may allow the path to the VMX executable, on a Windows host, to be hijacked by a non-administrator leading to elevation of privilege.

Vendors: vmware
Products: workstation
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.