CVE-2016-5328

—

CVSS 3.0

5.5 medium

EPSS

<1%p28

Published

Dec 29, 2016 (Dec 29, 2016)

Modified

Jun 17, 2026

Description

VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.

Vendors: vmware
Products: tools
Weakness: CWE-200, CWE-254
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.