VULNERABILITY INTELLIGENCE

CVE-2016-7085

CVSS score7.8 HIGH

EPSS probability0.42%

CISA KEVNot currently listed

Published2016-12-29

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Weakness classification

CWE-426: Untrusted Search Path

Primary references

cve@mitre.org — Third Party Advisory, VDB Entry
cve@mitre.org
cve@mitre.org — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory