vulnerability

VMware VMware Tools: CVE-2016-7085: VMware Workstation installer DLL hijacking issue

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

Published

Sep 13, 2016

Added

Aug 8, 2025

Modified

Aug 8, 2025

Description

Workstation installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code.

Solution

vmware-tools-upgrade-latest

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23488
CVE-2016-7085
https://attackerkb.com/topics/CVE-2016-7085
CWE-426

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report