What is CVE-2019-5522?

CVE-2019-5522 is a high-severity vulnerability in Microsoft Windows, classified under Out-of-bounds Read. CVSS score: 7.1/10. Published 2019-06-06.

How severe is CVE-2019-5522?

High severity. CVSS v3 base score is 7.1 out of 10.

Out-of-bounds Read in Microsoft Windows

CVE-2019-5522

VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines. This issue is present in versions 10.2.x and 10.3.x prior to 10.3.10. A local attacke…

Vulnerability class: Buffer Overflow

EPSS: 0.005 (39.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.

Affected products

Microsoft Windows
Vmware Tools
Vmware Tools For Windows — versions VMware Tools for Windows (10.x before 10.3.10)

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

security@vmware.com (x_refsource_CONFIRM, Vendor Advisory)
security@vmware.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-5522?: CVE-2019-5522 is a high-severity vulnerability in Microsoft Windows, classified under Out-of-bounds Read. CVSS score: 7.1/10. Published 2019-06-06.
How severe is CVE-2019-5522?: High severity. CVSS v3 base score is 7.1 out of 10.