KLA12116 PE vulnerability in VMware Workstation and Player

A DLL hijacking vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to gain privileges.

Original advisories

VMSA-2019-0007

Related products

VMware-Workstation

VMware-Player

CVE list

CVE-2019-5526 critical

Solution

Update to the latest version

Download VMWare Workstation

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• VMware Player earlier than 15.1.0VMware Workstation earlier than 15.1.0