CVE-2019-5515 is an out-of-bounds write vulnerability affecting the e1000 and e1000e virtual network adapters in VMware Workstation (versions 15.x before 15.0.3, 14.x before 14.1.6) and Fusion (versions 11.x before 11.0.3, 10.x before 10.1.6). This vulnerability carries a high CVSS score of 8.8, indicating a significant risk, as it can be exploited remotely with low complexity and user privileges, potentially leading to code execution on the host or, more likely, a denial of service for the guest. While no public exploit intelligence (Metasploit, Nuclei, ExploitDB) is currently available, the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the cybersecurity community. There is no indication of active exploitation in the wild.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 10.0.0, < 10.1.6CPE matchmatch criteria | cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* | ||
>= 11.0.0, < 11.0.3CPE matchmatch criteria | cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* | ||
>= 14.0.0, < 14.1.6CPE matchmatch criteria | cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* | ||
>= 15.0.0, < 15.0.3CPE matchmatch criteria | cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.