CVE-2019-5535: VMware Fusion

Medium severity, CVSS 4.7. EPSS: 0.5% chance of exploitation in the next 30 days.

VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.7.

Affected products

• VMware Fusion: from 11.0.0, before 11.5.0 (fixed in 11.5.0)
• VMware Workstation: from 15.0.0, before 15.5.0 (fixed in 15.5.0)

Published 2019-10-10. Last modified 2026-06-17.