CVE-2019-5524: VMware Fusion

High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days.

VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual network adapter. This issue may allow a guest to execute code on the host.

Affected products

• VMware Fusion: from 10.0.0, before 10.1.6 (fixed in 10.1.6)
• VMware Workstation: from 14.0.0, before 14.1.6 (fixed in 14.1.6)

Published 2019-04-02. Last modified 2026-06-17.