CVE-2016-5328
Estado: ModificadaMedia (5.5)—
VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 5.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.35%
- Percentil entre todas las CVEs puntuadas: 26
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-200, CWE-254
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-5328",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.1,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2016-12-29T09:59:00.180",
"references": [
{
"url": "http://www.securityfocus.com/bid/93886",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id/1037102",
"source": "cve@mitre.org"
},
{
"url": "http://www.vmware.com/security/advisories/VMSA-2016-0017.html",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/93886",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1037102",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vmware.com/security/advisories/VMSA-2016-0017.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
},
{
"lang": "en",
"value": "CWE-254"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors."
},
{
"lang": "es",
"value": "VMware Tools 9.x y 10.x en versiones anteriores a 10.1.0 en OS X, cuando System Integrity Protection (SIP) está habilitado, permite a usuarios locales determinar las direcciones de memoria del kernel y eludir el mecanismo de protección kASLR a través de vectores no especificados."
}
],
"lastModified": "2026-06-17T00:49:13.237",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:tools:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CDCE615-BA28-4932-A47B-A14071A2D8BF",
"versionEndIncluding": "10.0.8"
},
{
"criteria": "cpe:2.3:a:vmware:tools:10.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89B3580E-41A1-4EB8-A97C-34B965B414D3"
},
{
"criteria": "cpe:2.3:a:vmware:tools:10.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F999AF0-4C3D-476D-A632-D367345259BA"
},
{
"criteria": "cpe:2.3:a:vmware:tools:10.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A53AE7E3-FB3E-4575-83B3-90D5638A34D0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:tools:9.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F53BD4E0-1377-4AD1-8D6E-3630368C2357"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8ABEAC91-A25E-4C4A-A8FA-902DEED4778B"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86B25FE3-1626-458D-B1A3-69D8D3862ECF"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8496AEB-2001-4F69-AE8A-D929110C5920"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABB332F1-5675-409E-9B17-8DCEB6481C5B"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB931B48-FEE8-4987-8DEC-1DEDBB685DC3"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AB253B4-B143-42D7-B93F-300C4DCF7A6F"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.0.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F8C1483-2C87-40F9-8AE4-CBB75A3BF0F1"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E3A1F02-756E-4C18-AB60-2B139BDF6158"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC158F12-905C-41D6-A4F8-C3351434F473"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2696F33-AEB3-4D68-A537-AA29C8CDF4E8"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C97C8E2-BE58-4EC0-BABA-E23A112B97C1"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.4.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B68B85BC-D36D-4FF3-B2F6-394D55882ABD"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.4.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3C582AB-ED9B-4A44-AA94-6902A4F36266"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.4.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32123ECF-4097-4432-A4DC-547EF930A13E"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.4.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "260C1C0E-EEB9-41FF-8D32-D1227108E65F"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA562638-A2D1-4FC1-8B5D-C6765ADA00B0"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFC86659-B04F-4017-9231-183087231BFA"
},
{
"criteria": "cpe:2.3:a:vmware:tools:9.10.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "322CAF3E-8C85-4B4E-B980-30CAB5DCC77E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}