GCVE - cpe:2.3:a:vmware:tools:9.4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:tools:9.4.0:*:*:*:*:*:*:*

part: a version: 9.4.0 update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Tools (`5f4e4a0c-1d04-57b2-9355-6d00a908059b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/vmware/open-vm-tools`	purl2cpe	2026-06-01 10:12:21.820951
`pkg:sourceforge/open-vm-tools`	purl2cpe	2026-06-01 10:12:21.820952

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-7080`	vulnerable	2026-06-08 05:08:11.727705	Details available The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7079. Published: 2016-12-29T09:02:00.000Z Updated: 2024-08-06T01:50:46.649Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2016-0014.html http://www.securityfocus.com/bid/92938 http://www.securitytracker.com/id/1036804	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-7079`	vulnerable	2026-06-08 05:08:11.722979	Details available The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7080. Published: 2016-12-29T09:02:00.000Z Updated: 2024-08-06T01:50:47.478Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2016-0014.html http://www.securityfocus.com/bid/92938 http://www.securitytracker.com/id/1036804	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5328`	vulnerable	2026-06-08 05:07:56.782113	Details available VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors. Published: 2016-12-29T09:02:00.000Z Updated: 2024-08-06T01:00:58.025Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/93886 http://www.vmware.com/security/advisories/VMSA-2016-0017.html http://www.securitytracker.com/id/1037102	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.