What is CVE-2019-5512?

CVE-2019-5512 is a high-severity vulnerability in Microsoft Windows. CVSS score: 8.8/10. Published 2019-04-09.

How severe is CVE-2019-5512?

High severity. CVSS v3 base score is 8.8 out of 10.

Is CVE-2019-5512 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Microsoft Windows

CVE-2019-5512

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately. Successful exploitation of this issue may allow hijacking of COM classes used by the VMX process, on a Windows host…

EPSS: 0.012 (65.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Microsoft Windows
Vmware Workstation
N/a Vmware Workstation — versions VMware Workstation 15.x prior to 15.0.3, 14.x before 14.1.6

Public proof-of-concept exploits

punishell/WindowsLegacyCVE

References

security@vmware.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5512?: CVE-2019-5512 is a high-severity vulnerability in Microsoft Windows. CVSS score: 8.8/10. Published 2019-04-09.
How severe is CVE-2019-5512?: High severity. CVSS v3 base score is 8.8 out of 10.
Is CVE-2019-5512 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.