Privilege Escalation Vulnerability in VMware Workstation and Player
CVE-2016-7086
7.8HIGH
Key Information:
- Vendor
Vmware
- Vendor
- CVE Published:
- 29 December 2016
What is CVE-2016-7086?
The installer for VMware Workstation Pro and Player versions prior to 12.5.0 on Windows contains a vulnerability that allows local users to escalate privileges. This arises from the presence of a Trojan horse named setup64.exe in the installation directory, which can be exploited to gain unauthorized access and perform actions with heightened privileges. Users are advised to update to the latest version to mitigate the risk of exploitation.