Privilege escalation

VMware Workstation 15.x before 15.0.3, 14.x before 14.1.6 running on Windows does not handle COM classes appropriately. Successful exploitation of this issue may allow hijacking of COM classes used by the VMX process, on a Windows host, leading to elevation of privilege...

CVE-2019-5512

VMware Workstation 15.x before 15.0.3, 14.x before 14.1.6 running on Windows does not handle COM classes appropriately. Successful exploitation of this issue may allow hijacking of COM classes used by the VMX process, on a Windows host, leading to elevation of privilege...

CVE-2019-5512

VMware Workstation on Windows is affected by CVE-2019-5512 due to improper handling of COM classes used by the VMX process, enabling local privilege escalation. Affected versions are Workstation Pro < 14.1.6 and Workstation 15.x

CVE-2019-5511

VMware Workstation 15.x before 15.0.3, 14.x before 14.1.6 running on Windows does not handle paths appropriately. Successful exploitation of this issue may allow the path to the VMX executable, on a Windows host, to be hijacked by a non-administrator leading to elevation of privilege...

CVE-2019-5511

CVE-2019-5511 affects VMware Workstation on Windows (VMware Workstation Pro < 14.1.6, Player < 14.1.6; Pro < 15.0.3, Player

The vulnerability of VMware Workstation’s virtualization platform lies in its security flaws related to the handling of executable file paths, allowing attackers to escalate their privileges.

The vulnerability of VMware Workstation’s virtualization platform is related to deficiencies in security mechanisms for processing pathnames of executable files. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of VMware Workstation’s virtualization platform, related to deficiencies in protection mechanisms for handling COM classes, allows attackers to escalate their privileges.

The vulnerability of VMware Workstation’s virtualization platform is related to deficiencies in protection mechanisms for handling COM classes. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2019-5515

VMware Workstation 15.x before 15.0.3, 14.x before 14.1.6 and Fusion 11.x before 11.0.3, 10.x before 10.1.6 updates address an out-of-bounds write vulnerability in the e1000 and e1000e virtual network adapters. Exploitation of this issue may lead to code execution on the host from the guest but i...

Out-of-bounds

VMware Workstation 15.x before 15.0.3, 14.x before 14.1.6 and Fusion 11.x before 11.0.3, 10.x before 10.1.6 updates address an out-of-bounds write vulnerability in the e1000 and e1000e virtual network adapters. Exploitation of this issue may lead to code execution on the host from the guest but i...

CVE-2019-5524

VMware Workstation 14.x before 14.1.6 and Fusion 10.x before 10.1.6 contain an out-of-bounds write vulnerability in the e1000 virtual network adapter. This issue may allow a guest to execute code on the host...

CVE-2019-5515

VMware Workstation 15.x before 15.0.3, 14.x before 14.1.6 and Fusion 11.x before 11.0.3, 10.x before 10.1.6 updates address an out-of-bounds write vulnerability in the e1000 and e1000e virtual network adapters. Exploitation of this issue may lead to code execution on the host from the guest but i...

Out-of-bounds

VMware Workstation 14.x before 14.1.6 and Fusion 10.x before 10.1.6 contain an out-of-bounds write vulnerability in the e1000 virtual network adapter. This issue may allow a guest to execute code on the host...

CVE-2019-5524

VMware Workstation 14.x before 14.1.6 and Fusion 10.x before 10.1.6 contain an out-of-bounds write vulnerability in the e1000 virtual network adapter. This issue may allow a guest to execute code on the host...

CVE-2019-5515

VMware Workstation 15.x before 15.0.3, 14.x before 14.1.6 and Fusion 11.x before 11.0.3, 10.x before 10.1.6 updates address an out-of-bounds write vulnerability in the e1000 and e1000e virtual network adapters. Exploitation of this issue may lead to code execution on the host from the guest but i...

CVE-2019-5515

VMware has released advisories addressing several critical out-of-bounds and TOCTOU issues across ESXi, Workstation, and Fusion related to the e1000/e1000e virtual network adapters and UHCI USB controllers. The CVEs tied to these flaws include CVE-2019-5515 (e1000/e1000e out-of-bounds write, gues...

CVE-2019-5524

CVE-2019-5524 is an out-of-bounds write in the e1000 virtual network adapter that may allow a guest to execute code on the host. Affected products per provided docs: VMware Workstation 14.x (prior to 14.1.6) and VMware Fusion 10.x (prior to 10.1.6). The issue originates from the e1000 implementat...

CVE-2019-5524

VMware Workstation 14.x before 14.1.6 and Fusion 10.x before 10.1.6 contain an out-of-bounds write vulnerability in the e1000 virtual network adapter. This issue may allow a guest to execute code on the host...

VMware Workstation e1000 Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the guest system in order to exploit this vulnerability. The specific flaw exists within the handling ...

CVE-2019-5518

VMware ESXi 6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001, Workstation 15.x before 15.0.4, 14.x before 14.1.7, Fusion 11.x before 11.0.3, 10.x before 10.1.6 contain an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI Universal Host...

CVE-2019-5518

VMware ESXi 6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001, Workstation 15.x before 15.0.4, 14.x before 14.1.7, Fusion 11.x before 11.0.3, 10.x before 10.1.6 contain an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI Universal Host...