CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: vmware workstation (15.x before 15.0.3, 14.x before 14.1.6) running on windows does not handle com classes appropriately. successful exploitation of this issue may allow hijacking of com classes used by the vmx process, on a windows host, leading to elevation of privilege.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-04-09
Last Modified Date: 2019-04-11