Not rated
CVE-2019-5514 VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs…
Description
VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Fusion | Versions not published |
References
- packetstormsecurity.com packetstormsecurity.com
- 107637 www.securityfocus.com
- www.vmware.com www.vmware.com
Timeline
- Published
- Last modified
Other CVEs of VMware Fusion
The 7 CVEs of VMware Fusion →
CVE-2026-59347
VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS
8.1
High
CVE-2026-59346
VMware Workstation and Fusion contain an integer-overflow vulnerability
9.3
Critical
CVE-2020-3959
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before…
Not rated
CVE-2020-3958
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before…
Not rated