CVE-2019-5526

VMware Workstation 15.x before 15.1.0 contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where...

CVE-2019-5526

Summary: CVE-2019-5526 affects VMware Workstation (15.x before 15.1.0). The issue is a DLL hijacking flaw where certain DLLs are loaded improperly, notably involving shfolder.dll and SHGetFolderPathW. Impact: successful exploitation can escalate from normal user privileges to administrator on a W...

CVE-2019-5526

VMware Workstation 15.x before 15.1.0 contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where...

Photon OS 1.0: Pyyaml PHSA-2019-1.0-0224

An update of the PyYAML package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0224. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid12508...

Photon OS 1.0: Haproxy PHSA-2019-1.0-0226

An update of the haproxy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0226. The text itself is copyright C VMware, Inc. include"compat.inc"; if description...

Photon OS 1.0: Libxslt PHSA-2019-1.0-0224

An update of the libxslt package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0224. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Haproxy PHSA-2019-1.0-0220

An update of the haproxy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0220. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Sqlite PHSA-2019-1.0-0231

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0231. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid12508...

Photon OS 1.0: Cairo PHSA-2019-1.0-0220

An update of the cairo package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0220. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid125156...

Photon OS 2.0: Sqlite PHSA-2019-2.0-0154

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0154. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12507...

Photon OS 2.0: Tar PHSA-2019-2.0-0154

An update of the tar package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0154. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid125080;...

Photon OS 1.0: Gnutls PHSA-2019-1.0-0224

An update of the gnutls package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0224. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12508...

Photon OS 1.0: Libssh2 PHSA-2019-1.0-0222

An update of the libssh2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0222. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Ceph PHSA-2019-2.0-0154

An update of the ceph package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0154. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid125078;...

VMSA-2019-0008 : MDS Vulnerabilities (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

a. Hypervisor Specific and Hypervisor-Assisted Guest Mitigations for MDS vulnerabilities vCenter Server, ESXi, Workstation, and Fusion updates support Hypervisor-Specific and Hypervisor-Assisted Guest Mitigations for MDS speculative execution vulnerabilities. These updates expose new CPU control...

Photon OS 1.0: Libseccomp PHSA-2019-1.0-0228

An update of the libseccomp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0228. The text itself is copyright C VMware, Inc. include"compat.inc"; if description...

Photon OS 1.0: Libarchive PHSA-2019-1.0-0227

An update of the libarchive package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0227. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in vCenter Server, ESXi, Workstation, and Fusion. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

KLA12116 PE vulnerability in VMware Workstation and Player

A DLL hijacking vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to gain privileges. Original advisories VMSA-2019-0007 Related products VMware-Workstation VMware-Player CVE list CVE-2019-5526 critical Solution Update to the latest version...

VMware product updates enable Hypervisor-Specific Mitigations, Hypervisor-Assisted Guest Mitigations, and Operating System-Specific Mitigations for Microarchitectural Data Sampling (MDS) Vulnerabilities (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091)

3a. Hypervisor-Specific Mitigations for MDS vulnerabilities - CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091 vCenter Server, ESXi, Workstation, and Fusion updates include Hypervisor-Specific Mitigations for MDS speculative execution vulnerabilities. VMware has evaluated the...