CVE-2019-5512 - VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately

Back Back to CVE browser

HIGH

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately

Published Apr 9, 2019

8.8

HIGH

CVSS 3.0

EPSS 1.23%

Description

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately. Successful exploitation of this issue may allow hijacking of COM classes used by the VMX process, on a Windows host, leading to elevation of privilege.

Affected products

Vendor n/a Product VMware Workstation Default
n/a
- Version
  VMware Workstation 15.x prior to 15.0.3, 14.x before 14.1.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

VMware Workstation

n/a

Version	Status	Constraints
VMware Workstation 15.x prior to 15.0.3, 14.x before 14.1.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15087
Advisory
https://www.vmware.com/security/advisories/VMSA-2019-0002.html
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15087		Advisory
https://www.vmware.com/security/advisories/VMSA-2019-0002.html		x_refsource_MISCPatchVendor Advisory