Black Friday60% off BLACKFRIDAY2026
Platform
PlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE

CVE-2019-5544

9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
esxi and horizon daas
Updated Nov 10, 2026View on NVD →
S4E scanner
criticalNetwork Vulnerabilities~10 seconds

VMware ESXi SLP - Heap Overflow DoS

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. References: https://nvd.nist.gov/vuln/detail/CVE-2019-5544 https://github.com/dgh05t/VMware_ESXI_OpenSLP_PoCs http://www.openwall.com/lists/oss-security/2019/12/10/2 http://www.openwall.com/lists/oss-security/2019/12/11/2 https://access.redhat.com/errata/RHSA-2019:4240

9 assets checked · domain, subdomain, ipv4

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →