CVE-2019-5525

8.8 highEPSS 0.4%

High (8.8) in vmware workstation. EPSS 0.4% chance of exploitation in the next 30 days.

VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2019-06-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:workstation

References

http://www.securityfocus.com/bid/108674
https://www.vmware.com/security/advisories/VMSA-2019-0009.html
http://www.securityfocus.com/bid/108674
https://www.vmware.com/security/advisories/VMSA-2019-0009.html

Check your stack JSON