VULNERABILITY INTELLIGENCE

CVE-2019-5525

CVSS score8.8 HIGH
EPSS probability0.44%
CISA KEVNot currently listed
Published2019-06-06
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.

Weakness classification

  • CWE-416: Use After Free

Primary references