CVE-2019-5526

VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
vmwareCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
VendorProductVersion
vmwareworkstation
15.0.0 ≤
𝑥
< 15.1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html
http://www.securityfocus.com/bid/108333
https://www.vmware.com/security/advisories/VMSA-2019-0007.html
http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html
http://www.securityfocus.com/bid/108333
https://www.vmware.com/security/advisories/VMSA-2019-0007.html