CVE-2019-5541

CVE-2019-5541 is an out-of-bounds write vulnerability in the e1000e virtual network adapter affecting VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1). This critical vulnerability, rated 9.1 CVSS, allows a highly privileged attacker to achieve code execution on the host from a guest VM or cause a denial-of-service within their own VM. While the attack complexity is low, the scope is changed, meaning a vulnerability in one component can affect resources beyond its security scope. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE.