CVE-2019-5524

—

CVSS 3.0

8.8 high

EPSS

4%p90

Published

Apr 2, 2019 (Apr 2, 2019)

Modified

Jun 17, 2026

Description

VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual network adapter. This issue may allow a guest to execute code on the host.

Vendors: vmware
Products: fusion, workstation
Weakness: CWE-787
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.0%)

In the news1 stories

VMware addressed vulnerabilities disclosed at Pwn2Own 2019

Security AffairsApr 1, 07:19 UTC · Apr 1, 2019Vulnerability CVE-2019-5518 CVE-2019-5519 CVE-2019-5524+2 CVEs