CVE-2019-5526

moderate-risk

Published 2019-05-15

VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed.

Do I need to act?

7.1% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

1 public exploit available

46851

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (1)

Workstation

Affected Vendors

Vmware

References (6)

Third Party Advisory http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.htm...

Third Party Advisory http://www.securityfocus.com/bid/108333

Vendor Advisory https://www.vmware.com/security/advisories/VMSA-2019-0007.html

Third Party Advisory http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.htm...

Third Party Advisory http://www.securityfocus.com/bid/108333

Vendor Advisory https://www.vmware.com/security/advisories/VMSA-2019-0007.html

/ 100

moderate-risk

Severity 24/34 · High

Exploitability 16/34 · Moderate

Exposure 5/34 · Minimal