vulnerability

VMware Workstation: Vulnerability (VMSA-2019-0020) (CVE-2019-11135)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:P/I:N/A:N)

Published

Nov 21, 2019

Added

Nov 21, 2019

Modified

Mar 30, 2026

Description

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

Solution

vmware-workstation-upgrade-15_5_1

References

CVE-2019-11135
https://attackerkb.com/topics/CVE-2019-11135
EUVD-EUVD-2019-2839
http://www.vmware.com/security/advisories/VMSA-2019-0020.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2839

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report