VMware Tools vulnerabilities

2 known vulnerabilities in VMware Tools from VMware. 1 is rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Exploited

  CVE-2025-41244Sep 29, 2025VMwareEPSS 16.4%

  VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploi

• 3.9 Low severity

  VMware Tools Authentication Bypass Exploited

  CVE-2023-20867Jun 13, 2023VMwareEPSS 13.6%

  A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.