CVE-2016-7461

The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (out-of-bounds memory access on the host OS) via unspecified vectors.

• CWE-119

• http://www.securityfocus.com/bid/94280Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037282
• http://www.vmware.com/security/advisories/VMSA-2016-0019.htmlMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/94280Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037282
• http://www.vmware.com/security/advisories/VMSA-2016-0019.htmlMitigation, Vendor Advisory

Published

Dec 29, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7454CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisc…
• CVE-2016-7456VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has …
• CVE-2016-7457VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allo…
• CVE-2016-7458VMware vSphere Client 5.5 before U3e and 6.0 before U2a allo…
• CVE-2016-7459VMware vCenter Server 5.5 before U3e and 6.0 before U2a allo…
• CVE-2016-7460The Single Sign-On feature in VMware vCenter Server 5.5 befo…
• CVE-2016-7462The Suite REST API in VMware vRealize Operations (aka vROps)…
• CVE-2016-7463Cross-site scripting (XSS) vulnerability in the Host Client …
• CVE-2016-7464Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7465Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7466Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci…6
• CVE-2016-7467The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 …