Vulnerability Spotlight: Denial of service in VMWare Workstation 15
Summary: Piotr Bania of Cisco Talos discovered a denial-of-service vulnerability in VMware Workstation 15, identified as TALOS-2018-0762/CVE-2019-5516, where a specially crafted vertex shader triggers an out-of-bounds read. The flaw can be triggered from VMware guest user mode and crashes the vmware-vmx.exe process on the host, affecting only Windows machines; Talos confirmed it against Workstation 15 (15.0.2 build-10952284) with Windows 10 x64 as the guest VM.
What's compelling: A crash triggered from inside a guest VM reaches the host process, so a compromised or untrusted guest can take down the VMware host itself. Talos worked with VMware on an update, and Snort rules 49045 and 49046 are listed to detect exploitation attempts.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Mentions
- CVE-2019-5516
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026