CVE-2019-5527

HIGH

8.8

CVSS Score

Published: October 10, 2019 at 04:28 PM UTC

Updated: June 17, 2026 at 02:37 AM UTC

6 products affected across 1 vendorWorkstationESXiFusion· also runs on 1 platform

Using ESXi, Workstation, Fusion, VMRC and Horizon Client by N/A?

Get instant alerts when new vulnerabilities affect ESXi, Workstation, Fusion, VMRC and Horizon Client - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 0.3%

Description

ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

ESXi · VMware

95%

v ≤ 5.x6.0 6.0 1 6.0 1a 6.0 1b 6.0 2 6.0 3 6.0 3a 6.0 600-201504401 6.0 600-201505401 6.0 600-201507101 6.0 600-201507102 6.0 600-201507401 6.0 600-201507402 6.0 600-201507403 6.0 600-201507404 6.0 600-201507405 6.0 600-201507406 6.0 600-201507407 6.0 600-201509101 6.0 600-201509102 6.0 600-201509201 6.0 600-201509202 6.0 600-201509203 6.0 600-201509204 6.0 600-201509205 6.0 600-201509206 6.0 600-201509207 6.0 600-201509208 6.0 600-201509209 6.0 600-201509210 6.0 600-201510401 6.0 600-201511401 6.0 600-201601101 6.0 600-201601102 6.0 600-201601401 6.0 600-201601402 6.0 600-201601403 6.0 600-201601404 6.0 600-201601405 6.0 600-201602401 6.0 600-201603101 6.0 600-201603102 6.0 600-201603201 6.0 600-201603202 6.0 600-201603203 6.0 600-201603204 6.0 600-201603205 6.0 600-201603206 6.0 600-201603207 6.0 600-201603208 6.0 600-201605401 6.0 600-201608101 6.0 600-201608401 6.0 600-201608402 6.0 600-201608403 6.0 600-201608404 6.0 600-201608405 6.0 600-201610410 6.0 600-201611401 6.0 600-201611402 6.0 600-201611403 6.0 600-201702101 6.0 600-201702102 6.0 600-201702201 6.0 600-201702202 6.0 600-201702203 6.0 600-201702204 6.0 600-201702205 6.0 600-201702206 6.0 600-201702207 6.0 600-201702208 6.0 600-201702209 6.0 600-201702210 6.0 600-201702211 6.0 600-201702212 6.0 600-201703401 6.0 600-201706101 6.0 600-201706102 6.0 600-201706103 6.0 600-201706401 6.0 600-201706402 6.0 600-201706403 6.0 600-201710301 6.0 600-201811001 6.0 600-201811401 6.0 600-201903001 6.0 600-201905001 6.0 600-201909001 6.5 6.5 2 6.5 650-201701001 6.5 650-201703001 6.5 650-201703002 6.5 650-201704001 6.5 650-201707101 6.5 650-201707102 6.5 650-201707103 6.5 650-201707201 6.5 650-201707202 6.5 650-201707203 6.5 650-201707204 6.5 650-201707205 6.5 650-201707206 6.5 650-201707207 6.5 650-201707208 6.5 650-201707209 6.5 650-201707210 6.5 650-201707211 6.5 650-201707212 6.5 650-201707213 6.5 650-201707214 6.5 650-201707215 6.5 650-201707216 6.5 650-201707217 6.5 650-201707218 6.5 650-201707219 6.5 650-201707220 6.5 650-201707221 6.5 650-201710001 6.5 650-201712001 6.5 650-201803001 6.5 650-201806001 6.5 650-201808001 6.5 650-201810001 6.5 650-201810002 6.5 650-201811001 6.5 650-201811002 6.5 650-201811301 6.5 650-201901001 6.5 650-201903001 6.7 6.7 670-201806001 6.7 670-201807001 6.7 670-201808001 6.7 670-201810001 6.7 670-201810101 6.7 670-201810102 6.7 670-201810103 6.7 670-201810201 6.7 670-201810202 6.7 670-201810203 6.7 670-201810204 6.7 670-201810205 6.7 670-201810206 6.7 670-201810207 6.7 670-201810208 6.7 670-201810209 6.7 670-201810210 6.7 670-201810211 6.7 670-201810212 6.7 670-201810213 6.7 670-201810214 6.7 670-201810215 6.7 670-201810216 6.7 670-201810217 6.7 670-201810218 6.7 670-201810219 6.7 670-201810220 6.7 670-201810221 6.7 670-201810222 6.7 670-201810223 6.7 670-201810224 6.7 670-201810225 6.7 670-201810226 6.7 670-201810227 6.7 670-201810228 6.7 670-201810229 6.7 670-201810230 6.7 670-201810231 6.7 670-201810232 6.7 670-201810233 6.7 670-201810234 6.7 670-201811001 6.7 670-201901001 6.7 670-201901401 6.7 670-201901402 6.7 670-201901403 6.7 670-201903001 6.7 670-201904001

Fusion · VMware

95%

v ≤ 5.x11.0.0 ≤ v < 11.5.0

Affected range stops below 11.5.0, so it looks safe — our inference, not a vendor statement

apple-macos (environment)

Horizon · VMware

95%

v < 5.2.0

Affected range stops below 5.2.0, so it looks safe — our inference, not a vendor statement

Remote Console · VMware

95%

v ≤ 5.x10.0.0 ≤ v < 10.0.5

Affected range stops below 10.0.5, so it looks safe — our inference, not a vendor statement

Workstation · VMware

95%

v ≤ 5.x15.0.0 ≤ v < 15.5.0

Affected range stops below 15.5.0, so it looks safe — our inference, not a vendor statement

Horizon Client · VMware

60%

v ≤ 5.x

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

macOS · Apple

95%

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.vmware.com/security/advisories/VMSA-2019-0014.html

References (1)

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

https://www.vmware.com/security/advisories/VMSA-2019-0014.html

CVSS

8.8HIGH[email protected]

Attack Vector: LOCAL
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: CHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card