high8.8Public exploit code
CVE-2019-5512
VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMware Workstation 14.1.5 / VMware Player 15 - Host VMX Process COM Class Hijack Privilege Escalation2019-03-25 · local · windows · Verified
Impact
VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately. Successful exploitation of this issue may allow hijacking of COM classes used by the VMX process, on a Windows host, leading to elevation of privilege.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Workstation | from 14.0.0 before 14.1.6 from 15.0.0 before 15.0.3 |