Advisories · Technology
VMware tools.
Every CVE that names VMware tools among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 HighCritical · KEVKEV
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
- VMware VCF operations
- VMware tools
- Privilege escalation
- CVSS 7.6 High
Improper authorisation vulnerability
- VMware Tools
- Broken access control
- CVSS 7.1 High
vSockets information-disclosure vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
- CVSS 6.1 Medium
Insecure file handling vulnerability
- VMware Tools
- Path traversal
- CVSS 7.8 High
Authentication bypass vulnerability
- VMware Tools
- Authentication bypass
- CVSS 7.1 High
Improper signature verification in VMware Tools and others
- VMware Tools
- open-vm-tools
- Weak cryptography or TLS
- CVSS 7.8 High
Improper privilege management in VMware Tools
- VMware Tools
- Privilege escalation
- CVSS 7.1 High
A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual ma…
- VMware Tools
- VMware Tools (open-vm-tools)
- CVSS 3.9 LowCritical · KEVKEV
VMware Tools Authentication Bypass Vulnerability
- VMware Tools
- Authentication bypass
-
VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability.
- VMware Tools
-
VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS.
- VMware Tools
-
VMware Tools: VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg…
- VMware Tools