{
    "id": "CVE-2019-5526",
    "published": "2019-05-15 16:29:00",
    "last_modified": "2026-06-17 02:37:50",
    "cvss_score": "7.8",
    "cvss_severity": "HIGH",
    "cvss_version": "3.0",
    "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
    "cwe": "CWE-427",
    "description": "VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed.",
    "epss_score": "0.09030",
    "epss_percentile": "0.95141",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-03 18:17:24",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "vmware",
            "product": "workstation"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "46851",
            "title": "VMware Workstation 15.1.0 - DLL Hijacking",
            "date": "2019-05-16",
            "url": "https://www.exploit-db.com/exploits/46851"
        }
    ],
    "refs_list": [
        "http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html",
        "http://www.securityfocus.com/bid/108333",
        "https://www.vmware.com/security/advisories/VMSA-2019-0007.html",
        "http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html",
        "http://www.securityfocus.com/bid/108333",
        "https://www.vmware.com/security/advisories/VMSA-2019-0007.html"
    ]
}