HIGH

CVE-2019-5526

CVSS v3

7.8

HIGH

EPSS Score

12.9%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed.

Technical details

Published
5/15/2019

Frequently asked questions

What is CVE-2019-5526?

VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed.

Is CVE-2019-5526 actively exploited?

Active exploitation of CVE-2019-5526 has not been confirmed. The EPSS score is 12.9%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2019-5526?

CVE-2019-5526 has a CVSS v3 base score of 7.8 (HIGH severity).

Is CVE-2019-5526 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.