CVE-2016-7086

—

CVSS 3.0

7.8 high

EPSS

<1%p27

Published

Dec 29, 2016 (Dec 29, 2016)

Modified

Jun 17, 2026

Description

The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.

Vendors: vmware
Products: workstation player, workstation pro
Weakness: CWE-264
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.