{"api_version":"1","generated_at":"2026-07-23T09:41:19+00:00","cve":"CVE-2019-5526","urls":{"html":"https://cve.report/CVE-2019-5526","api":"https://cve.report/api/cve/CVE-2019-5526.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2019-5526","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-5526"},"summary":{"title":"CVE-2019-5526","description":"VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed.","state":"PUBLIC","assigner":"security@vmware.com","published_at":"2019-05-15 16:29:00","updated_at":"2020-08-24 17:37:00"},"problem_types":["CWE-427"],"metrics":[],"references":[{"url":"http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html","name":"http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html","refsource":"MISC","tags":["Third Party Advisory"],"title":"VMware Workstation DLL Hijacking ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.vmware.com/security/advisories/VMSA-2019-0007.html","name":"https://www.vmware.com/security/advisories/VMSA-2019-0007.html","refsource":"MISC","tags":["Vendor Advisory"],"title":"VMSA-2019-0007","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/108333","name":"108333","refsource":"BID","tags":["Third Party Advisory","VDB Entry"],"title":"VMware Workstation CVE-2019-5526 DLL Loading Remote Code Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5526","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5526","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2019","cve_id":"5526","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2019","cve_id":"5526","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ID":"CVE-2019-5526","ASSIGNER":"security@vmware.com","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"VMware Workstation","version":{"version_data":[{"version_value":"VMware Workstation (15.x before 15.1.0)"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"DLL hijacking vulnerability"}]}]},"references":{"reference_data":[{"refsource":"MISC","name":"https://www.vmware.com/security/advisories/VMSA-2019-0007.html","url":"https://www.vmware.com/security/advisories/VMSA-2019-0007.html"},{"refsource":"BID","name":"108333","url":"http://www.securityfocus.com/bid/108333"},{"refsource":"MISC","name":"http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html","url":"http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html"}]},"description":{"description_data":[{"lang":"eng","value":"VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed."}]}},"nvd":{"publishedDate":"2019-05-15 16:29:00","lastModifiedDate":"2020-08-24 17:37:00","problem_types":["CWE-427"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"severity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndExcluding":"15.1.0","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2019","CveId":"5526","Ordinal":"143146","Title":"CVE-2019-5526","CVE":"CVE-2019-5526","Year":"2019"},"notes":[{"CveYear":"2019","CveId":"5526","Ordinal":"1","NoteData":"VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed.","Type":"Description","Title":null},{"CveYear":"2019","CveId":"5526","Ordinal":"2","NoteData":"2019-05-15","Type":"Other","Title":"Published"},{"CveYear":"2019","CveId":"5526","Ordinal":"3","NoteData":"2019-05-16","Type":"Other","Title":"Modified"}]}}}