What’s Vulnerable › Vulnerabilities

CVE-2019-5522

• Severity: high (CVSS 7.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-06 · updated 2026-06-17
• Weakness: CWE-125

Description

VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines. This issue is present in versions 10.2.x and 10.3.x prior to 10.3.10. A local attacker with non-administrative access to a Windows guest with VMware Tools installed may be able to leak kernel information or create a denial of service attack on the same Windows guest machine.

Affected products

• VMware Tools: from 10.0.0 before 10.3.10 — fixed in 10.3.10
• VMware Tools: VMware Tools for Windows (10.x before 10.3.10)

How to fix

Upgrade to a fixed version: VMware Tools 10.3.10. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/108673
• https://www.vmware.com/security/advisories/VMSA-2019-0009.html
• http://www.securityfocus.com/bid/108673
• https://www.vmware.com/security/advisories/VMSA-2019-0009.html

Get alerted when CVE-2019-5522 or the next vulnerability affects your stack