cvedb.io
CVE-2019-5511
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2019-04-09T20:30:20.447 · Last modified 2026-06-17T02:37:49.280

Summary

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Successful exploitation of this issue may allow the path to the VMX executable, on a Windows host, to be hijacked by a non-administrator leading to elevation of privilege.

Affected products

vmware — workstation

Does this affect you?

Add your gear to cvedb and we'll alert you only when vmware ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.