CVE-2016-5329 — Sensitive Information Exposure in Vmware Fusion

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 85.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Vmware Fusion
Timeline
PublishedDec 29
Latest updateMay 17

Description

VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

▶NVDvmware/fusion5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-5539-pf3p-rw8q: VMware Fusion 8↗2022-05-17
▶
CVEList
CVE-2016-5329: VMware Fusion 8↗2016-12-29
▶
CVE-2016-5329 — Sensitive Information Exposure | cvebase