GCVE - cpe:2.3:a:vmware:vmware_tools:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vmware_tools:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Vmware Tools (`32c9bb97-1f4c-54de-aead-e0d6a3c70894`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-41244`	vulnerable	2026-06-08 07:25:06.794926	VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) HIGH (7.8) VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM. Published: 2025-09-29T16:09:51.871Z Updated: 2026-02-26T17:47:52.174Z Open on db.gcve.eu Reference links http://support.broadcom.com/group/ecx/support-content-view/-/support-content/Security%20Advisories/VMSA-2025-0015--VMware-Aria-Operations-and-VMware-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41244-CVE-2025-41245--CVE-2025-41246-/36149	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20867`	not_vulnerable	2026-06-08 05:54:17.974690	VMware Tools Authentication Bypass Vulnerability LOW (3.9) A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. Published: 2023-06-13T16:47:21.689Z Updated: 2025-10-21T23:05:46.160Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2023-0013.html https://security.netapp.com/advisory/ntap-20230725-0001/ https://lists.debian.org/debian-lts-announce/2023/08/msg00020.html https://www.debian.org/security/2023/dsa-5493 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6969`	vulnerable	2026-06-08 05:11:54.546138	Details available VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate their privileges on the guest VMs. In order to be able to exploit this issue, file sharing must be enabled. Published: 2018-07-13T13:00:00.000Z Updated: 2024-09-17T03:42:42.563Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1041291 https://www.vmware.com/security/advisories/VMSA-2018-0017.html http://www.securityfocus.com/bid/104737	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-5191`	vulnerable	2026-06-08 05:06:49.160111	Details available VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Published: 2017-07-28T21:00:00.000Z Updated: 2024-09-16T17:27:59.722Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/100011 https://www.vmware.com/security/advisories/VMSA-2017-0013.html http://www.securitytracker.com/id/1039013	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.