UpHeron
All vulnerabilities

Servers and applications

CVE-2019-5527

ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5.

Severity
High 8.8
Published
10 Oct 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.3% in the next 30 daysHigher than 23% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
VMware ESXiServers and applications · cpe:o:vmware:esxi
  • Version 6.7-670-201904001
  • Version 6.7-670-201903001
  • Version 6.7-670-201901403
  • Version 6.7-670-201901402
All 179 release lines
  • Version 6.0-1a
  • Version 6.0-1b
  • Version 6.0-3a
  • Version 6.0
  • Version 6.0-1
  • Version 6.0-2
  • Version 6.0-3
  • Version 6.0-600-201504401
  • Version 6.0-600-201505401
  • Version 6.0-600-201507101
  • Version 6.0-600-201507102
  • Version 6.0-600-201507401
  • Version 6.0-600-201507402
  • Version 6.0-600-201507403
  • Version 6.0-600-201507404
  • Version 6.0-600-201507405
  • Version 6.0-600-201507406
  • Version 6.0-600-201507407
  • Version 6.0-600-201509101
  • Version 6.0-600-201509102
  • Version 6.0-600-201509201
  • Version 6.0-600-201509202
  • Version 6.0-600-201509203
  • Version 6.0-600-201509204
  • Version 6.0-600-201509205
  • Version 6.0-600-201509206
  • Version 6.0-600-201509207
  • Version 6.0-600-201509208
  • Version 6.0-600-201509209
  • Version 6.0-600-201509210
  • Version 6.0-600-201510401
  • Version 6.0-600-201511401
  • Version 6.0-600-201601101
  • Version 6.0-600-201601102
  • Version 6.0-600-201601401
  • Version 6.0-600-201601402
  • Version 6.0-600-201601403
  • Version 6.0-600-201601404
  • Version 6.0-600-201601405
  • Version 6.0-600-201602401
  • Version 6.0-600-201603101
  • Version 6.0-600-201603102
  • Version 6.0-600-201603201
  • Version 6.0-600-201603202
  • Version 6.0-600-201603203
  • Version 6.0-600-201603204
  • Version 6.0-600-201603205
  • Version 6.0-600-201603206
  • Version 6.0-600-201603207
  • Version 6.0-600-201603208
  • Version 6.0-600-201605401
  • Version 6.0-600-201608101
  • Version 6.0-600-201608401
  • Version 6.0-600-201608402
  • Version 6.0-600-201608403
  • Version 6.0-600-201608404
  • Version 6.0-600-201608405
  • Version 6.0-600-201610410
  • Version 6.0-600-201611401
  • Version 6.0-600-201611402
  • Version 6.0-600-201611403
  • Version 6.0-600-201702101
  • Version 6.0-600-201702102
  • Version 6.0-600-201702201
  • Version 6.0-600-201702202
  • Version 6.0-600-201702203
  • Version 6.0-600-201702204
  • Version 6.0-600-201702205
  • Version 6.0-600-201702206
  • Version 6.0-600-201702207
  • Version 6.0-600-201702208
  • Version 6.0-600-201702209
  • Version 6.0-600-201702210
  • Version 6.0-600-201702211
  • Version 6.0-600-201702212
  • Version 6.0-600-201703401
  • Version 6.0-600-201706101
  • Version 6.0-600-201706102
  • Version 6.0-600-201706103
  • Version 6.0-600-201706401
  • Version 6.0-600-201706402
  • Version 6.0-600-201706403
  • Version 6.0-600-201710301
  • Version 6.0-600-201811001
  • Version 6.0-600-201811401
  • Version 6.0-600-201903001
  • Version 6.0-600-201905001
  • Version 6.0-600-201909001
  • Version 6.5
  • Version 6.5-2
  • Version 6.5-650-201701001
  • Version 6.5-650-201703001
  • Version 6.5-650-201703002
  • Version 6.5-650-201704001
  • Version 6.5-650-201707101
  • Version 6.5-650-201707102
  • Version 6.5-650-201707103
  • Version 6.5-650-201707201
  • Version 6.5-650-201707202
  • Version 6.5-650-201707203
  • Version 6.5-650-201707204
  • Version 6.5-650-201707205
  • Version 6.5-650-201707206
  • Version 6.5-650-201707207
  • Version 6.5-650-201707208
  • Version 6.5-650-201707209
  • Version 6.5-650-201707210
  • Version 6.5-650-201707211
  • Version 6.5-650-201707212
  • Version 6.5-650-201707213
  • Version 6.5-650-201707214
  • Version 6.5-650-201707215
  • Version 6.5-650-201707216
  • Version 6.5-650-201707217
  • Version 6.5-650-201707218
  • Version 6.5-650-201707219
  • Version 6.5-650-201707220
  • Version 6.5-650-201707221
  • Version 6.5-650-201710001
  • Version 6.5-650-201712001
  • Version 6.5-650-201803001
  • Version 6.5-650-201806001
  • Version 6.5-650-201808001
  • Version 6.5-650-201810001
  • Version 6.5-650-201810002
  • Version 6.5-650-201811001
  • Version 6.5-650-201811002
  • Version 6.5-650-201811301
  • Version 6.5-650-201901001
  • Version 6.5-650-201903001
  • Version 6.7
  • Version 6.7-670-201806001
  • Version 6.7-670-201807001
  • Version 6.7-670-201808001
  • Version 6.7-670-201810001
  • Version 6.7-670-201810101
  • Version 6.7-670-201810102
  • Version 6.7-670-201810103
  • Version 6.7-670-201810201
  • Version 6.7-670-201810202
  • Version 6.7-670-201810203
  • Version 6.7-670-201810204
  • Version 6.7-670-201810205
  • Version 6.7-670-201810206
  • Version 6.7-670-201810207
  • Version 6.7-670-201810208
  • Version 6.7-670-201810209
  • Version 6.7-670-201810210
  • Version 6.7-670-201810211
  • Version 6.7-670-201810212
  • Version 6.7-670-201810213
  • Version 6.7-670-201810214
  • Version 6.7-670-201810215
  • Version 6.7-670-201810216
  • Version 6.7-670-201810217
  • Version 6.7-670-201810218
  • Version 6.7-670-201810219
  • Version 6.7-670-201810220
  • Version 6.7-670-201810221
  • Version 6.7-670-201810222
  • Version 6.7-670-201810223
  • Version 6.7-670-201810224
  • Version 6.7-670-201810225
  • Version 6.7-670-201810226
  • Version 6.7-670-201810227
  • Version 6.7-670-201810228
  • Version 6.7-670-201810229
  • Version 6.7-670-201810230
  • Version 6.7-670-201810231
  • Version 6.7-670-201810232
  • Version 6.7-670-201810233
  • Version 6.7-670-201810234
  • Version 6.7-670-201811001
  • Version 6.7-670-201901001
  • Version 6.7-670-201901401
  • Version 6.7-670-201901402
  • Version 6.7-670-201901403
  • Version 6.7-670-201903001
  • Version 6.7-670-201904001

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-5527
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-5527