Vulnerabilidades de VMware Tools (CVE)

Registros CVE publicados para VMware Tools, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

4 resultados

7.8Alta

CVE-2025-41244 KEV hace 1 año

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

VMware VCF operations; VMware VMware tools; VMware VMware Aria Operations; VMware VMware Cloud Foundation

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

8.6%EPSS

7.6Alta

CVE-2025-41246 hace 1 año

Improper authorisation vulnerability

VMware Tools

VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this …

7.1Alta

CVE-2025-41239 hace 1 año

vSockets information-disclosure vulnerability

VMware ESXi; VMware Cloud Foundation; VMware Workstation; VMware Fusion

VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit thi…

3.2%EPSS

3.9Baja

CVE-2023-20867 KEV hace 3 años

VMware Tools Authentication Bypass Vulnerability

VMware VMware Tools

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

14%EPSS