Vulnerability Intelligence Report
CVE-2019-5527
ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5.
No Active Exploit Signals
CVSS Base Score
8.8
HIGH
EPSS Probability:0.30%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| vmware | horizon | all |
| vmware | remote_console | all |
| vmware | workstation | all |
| vmware | fusion | all |
| apple | mac_os_x | all |
| vmware | esxi | 6.0, 6.5, 6.7 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.303%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | VMware by Broadcom · Vendor · USA |
| Reserved | 2019-01-07T00:00:00 |
| Published | 2019-10-10T16:28:46 |
| Last Updated | 2024-08-04T20:01:50 |
Community Chatter & Buzz