VMware Tools vulnerabilities
We track 5 vulnerabilities in VMware Tools products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2025.
Latest VMware Tools vulnerabilities
- 7.8 High severity
VMware Tools: Authentication Bypass Using an Alternate Path or Channel
VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a guest VM may gain ability to perform certain high privilege operations within that VM.
- 7.5 High severity
VMware Tools: Improper Verification of Cryptographic Signature
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virt
- 7.8 High severity
VMware Tools: Improper Privilege Management
VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual machine.
- 7.5 High severity
VMware Tools: Authentication Bypass by Capture-replay
A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target
- 7.8 High severity
VMware Tools: Improper Privilege Management
VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.