This may allow hijacking of COM classes used by the VMX process, on a Windows host, leading to elevation of privilege.

COM classes are not handled appropriately.

See VMSA-2019-0002 for further information. The Common Vulnerabilities and Exposures project () has assigned the identifier CVE-2019-5511 to this issue. This may allow the path to the VMX executable, on a Windows host, to be hijacked by a non-administrator leading to elevation of privilege.

Workstation Player does not handle paths appropriately.

VMware Workstation Player contains elevation of privilege vulnerabilities: VMware Workstation Player 15.0.3 changelog:

Gain easy access to virtual machines via an intuitive home page interface.

Broad host and guest operating system support.

Share data between the host computer and virtual machine.

Use 3rd-party pre-configured virtual machines and images.

Share data between host computer and virtual machine.

Experience the benefits of preconfigured products without any installation or configuration hassles.

Run multiple operating systems simultaneously on a single computer.

VMware Player can also be used to run a virtual copy of an old PC so that you can recycle the old machines you have under your desk or stored in the closet. With its user-friendly interface, VMware Player makes it effortless for anyone to try out Windows 10, Chrome OS or the latest Linux releases, or to create virtual 'sandboxes' to test pre-release software in. VMware Player is the easiest way to run multiple operating systems at the same time on your computer.

Vmware workstation player 15