CVE-2016-5330: vmware esxi Untrusted Search Path
Vulnerability summary
CVE-2016-5330 is a high (CVSS 7.8) Untrusted Search Path vulnerability in vmware esxi. EPSS estimates a 18.02% chance of exploitation in the next 30 days, higher than 97.1% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 08-08-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
18.02%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 18.02% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (securify.nl)
Maturity: unknown
VMware Host Guest Client Redirector - DLL Side Loading (Metasploit)
Maturity: weaponized
DLL Side Loading Vulnerability in VMware Host Guest Client Redirector
exploit/windows/misc/vmhgfs_webdav_dll_sideload
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Vmware5 products
- esxi≥ 5.0, ≤ 6.0
- fusion≥ 8.1, < 8.1.1
- tools≥ 9.0.0, ≤ 10.3.22
- workstation_player≥ 12.1.0, < 12.1.1
- workstation_pro≥ 12.1.0, < 12.1.1
1 vendor · 5 products
References
8 links- www.securityfocus.com/archive/1/539131/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
- www.rapid7.com/db/modules/exploit/windows/misc/vmhgfs_webdav_dll_sideloadX Refsource MISCThird Party Advisory