CVE-2019-5525

VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.

• CWE-416

• http://www.securityfocus.com/bid/108674Third Party Advisory, VDB Entry
• https://www.vmware.com/security/advisories/VMSA-2019-0009.htmlVendor Advisory
• http://www.securityfocus.com/bid/108674Third Party Advisory, VDB Entry
• https://www.vmware.com/security/advisories/VMSA-2019-0009.htmlVendor Advisory

Published

Jun 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5519VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi65…
• CVE-2019-5520VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before …
• CVE-2019-5521VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before …9.6
• CVE-2019-5522VMware Tools for Windows update addresses an out of bounds r…
• CVE-2019-5523VMware vCloud Director for Service Providers 9.5.x prior to …
• CVE-2019-5524VMware Workstation (14.x before 14.1.6) and Fusion (10.x bef…
• CVE-2019-5526VMware Workstation (15.x before 15.1.0) contains a DLL hijac…
• CVE-2019-5527ESXi, Workstation, Fusion, VMRC and Horizon Client contain a…8.8
• CVE-2019-5528VMware ESXi 6.5 suffers from partial denial of service vulne…5.3
• CVE-2019-5530Windows binaries generated with InstallBuilder versions earl…
• CVE-2019-5531VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 …5.4
• CVE-2019-5532VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6…7.7