CVE-2019-5512

—

CVSS 3.0

8.8 high

EPSS

1%p67

Published

Apr 9, 2019 (Apr 9, 2019)

Modified

Jun 17, 2026

Description

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately. Successful exploitation of this issue may allow hijacking of COM classes used by the VMX process, on a Windows host, leading to elevation of privilege.

Vendors: vmware
Products: workstation
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.