<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: vmware-tools</title><description>Every new CVE for vmware-tools.</description><link>https://agentprime.io/</link><item><title>CVE-2025-41244: VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)</title><link>https://agentprime.io/advisories/CVE-2025-41244/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-41244/</guid><description>CVSS 7.8 (High). Critical: In CISA’s KEV catalogue since 30 Oct 2025: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Sep 2025 16:09:51 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2025-41246: Improper authorisation vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-41246/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-41246/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Sep 2025 15:57:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-41239: vSockets information-disclosure vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-41239/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-41239/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Jul 2025 18:35:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-22247: Insecure file handling vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-22247/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-22247/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 May 2025 10:46:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-22230: Authentication bypass vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-22230/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-22230/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Mar 2025 14:06:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-34058: Improper signature verification in VMware Tools and others</title><link>https://agentprime.io/advisories/CVE-2023-34058/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-34058/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Oct 2023 04:53:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-34057: Improper privilege management in VMware Tools</title><link>https://agentprime.io/advisories/CVE-2023-34057/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-34057/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Oct 2023 04:52:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20900: A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual ma…</title><link>https://agentprime.io/advisories/CVE-2023-20900/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20900/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 31 Aug 2023 09:45:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20867: VMware Tools Authentication Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-20867/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20867/</guid><description>CVSS 3.9 (Low). Critical: In CISA’s KEV catalogue since 23 Jun 2023: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Jun 2023 16:47:21 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2022-31676: VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability.</title><link>https://agentprime.io/advisories/CVE-2022-31676/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-31676/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Aug 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-6969: VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS.</title><link>https://agentprime.io/advisories/CVE-2018-6969/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-6969/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 13 Jul 2018 13:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2015-5191: VMware Tools: VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg…</title><link>https://agentprime.io/advisories/CVE-2015-5191/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2015-5191/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Jul 2017 21:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>