CVE-2016-5330

CVE-2016-5330 describes an untrusted search path vulnerability in the HGFS (Shared Folders) feature of VMware Tools, affecting various VMware products including ESXi, Workstation, and Fusion. This flaw allows a local attacker to gain privileges by tricking the system into loading a malicious DLL from the current working directory. With a CVSS score of 7.8 (High), the vulnerability is easily exploitable with low attack complexity, requiring user interaction, and can lead to high impact on confidentiality, integrity, and availability. While not on the CISA KEV catalog, exploit code, including a Metasploit module, is publicly available, and it has garnered community discussion and media coverage, indicating its relevance to attackers.