CVE-2019-5525
CVE-2019-5525
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Jun 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.
Affected products
VMware · VMware WorkstationWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →