Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:tools:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Tools (5f4e4a0c-1d04-57b2-9355-6d00a908059b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/vmware/open-vm-tools |
purl2cpe | 2026-06-01 10:12:21.805694 |
pkg:sourceforge/open-vm-tools |
purl2cpe | 2026-06-01 10:12:21.805696 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41246 |
vulnerable | 2026-06-08 07:25:06.815471 |
Improper authorisation vulnerability
HIGH (7.6)
VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successful exploitation requires knowledge of credentials of the targeted VMs and vCenter or ESX.
Published: 2025-09-29T15:57:58.438Z
Updated: 2026-02-26T17:47:52.977Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41244 |
vulnerable | 2026-06-08 07:25:06.809606 |
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
HIGH (7.8)
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
Published: 2025-09-29T16:09:51.871Z
Updated: 2026-02-26T17:47:52.174Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41239 |
vulnerable | 2026-06-08 07:25:06.786760 |
vSockets information-disclosure vulnerability
HIGH (7.1)
VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to leak memory from processes communicating with vSockets.
Published: 2025-07-15T18:35:03.747Z
Updated: 2025-07-15T18:51:58.342Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34058 |
vulnerable | 2026-06-08 06:06:24.350706 |
Details available
HIGH (7.1)
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
Published: 2023-10-27T04:53:09.935Z
Updated: 2025-03-06T15:40:20.221Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34057 |
vulnerable | 2026-06-08 06:06:24.345478 |
Details available
HIGH (7.8)
VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual machine.
Published: 2023-10-27T04:52:55.280Z
Updated: 2025-03-06T15:40:49.609Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-20900 |
vulnerable | 2026-06-08 05:54:18.129922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-20867 |
vulnerable | 2026-06-08 05:54:17.975795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31693 |
vulnerable | 2026-06-08 05:44:41.243350 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31676 |
vulnerable | 2026-06-08 05:44:41.136037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22977 |
vulnerable | 2026-06-08 05:40:55.866561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21997 |
vulnerable | 2026-06-08 05:29:59.585252 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3972 |
vulnerable | 2026-06-08 05:25:58.449142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3941 |
vulnerable | 2026-06-08 05:25:57.951819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5522 |
vulnerable | 2026-06-08 05:13:59.585575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6969 |
vulnerable | 2026-06-08 05:11:54.547164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7080 |
vulnerable | 2026-06-08 05:08:11.727442 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7079 |
vulnerable | 2026-06-08 05:08:11.715528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5330 |
vulnerable | 2026-06-08 05:07:56.794204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5328 |
vulnerable | 2026-06-08 05:07:56.773854 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5191 |
vulnerable | 2026-06-08 05:06:49.160670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4200 |
vulnerable | 2026-06-08 05:05:44.356390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4199 |
vulnerable | 2026-06-08 05:05:44.353312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.