VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 1, 2019· Updated Jun 17, 2026

CVE-2019-5514

CVE-2019-5514

Description

VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • VMware/Fusion2 versions
    cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: >=11.0.0,<11.0.3
    • (no CPE)range: <11.0.3
  • VMware/VMware Fusionv5
    Range: 11.x before 11.0.3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.