Vulnerability Spotlight: Multiple vulnerabilities in NVIDIA Windows GPU Display Driver, VMware ESXi, Workstation and Fusion
Summary: Cisco Talos's Piotr Bania discovered vulnerabilities in VMware Workstation 15 and NVIDIA's Windows GPU Display Driver, including a denial-of-service in VMware that can become a VM escape when the host or guest uses an NVIDIA graphics card (TALOS-2019-0779/CVE-2019-5684). Two out-of-bounds write flaws in the NVIDIA driver (TALOS-2019-0812 and TALOS-2019-0813, both CVE-2019-5685) can be triggered by a specially crafted pixel shader file and may lead to arbitrary code execution.
What you should know: A crafted shader file submitted from a VMware guest can crash the vmware-vmx.exe process on the host, and with an NVIDIA card in the path the same class of flaw escalates to code execution on the host - a VM escape that turns one guest into a foothold on everything it runs alongside.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-5684CVE-2019-5685
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026