CVE-2019-5522

CVE-2019-5522 is an out-of-bounds read vulnerability in the vm3dmp driver of VMware Tools for Windows, affecting versions 10.2.x and 10.3.x prior to 10.3.10. A local, non-administrative attacker on a Windows guest machine with VMware Tools installed could exploit this to leak kernel information or cause a denial of service. With a CVSS score of 7.1 (HIGH), the vulnerability has low attack complexity and requires local access, but can lead to high impact on confidentiality and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.