Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:vmware_tools_for_windows:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductVmware Tools For Windows (2c66d2d2-a2fd-5c0f-a00d-44248b35a0b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-22977 vulnerable 2026-06-08 05:40:55.865111 Details available
VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or unintended information disclosure.
Published: 2022-05-24T18:15:38.000Z
Updated: 2026-06-02T13:47:07.150Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22943 vulnerable 2026-06-08 05:40:55.598483 Details available
VMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest OS due to an uncontrolled search path element.
Published: 2022-03-03T21:59:08.000Z
Updated: 2024-08-03T03:28:42.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21997 vulnerable 2026-06-08 05:29:59.584409 Details available
VMware Tools for Windows (11.x.y prior to 11.3.0) contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a denial-of-service condition in the Windows guest operating system.
Published: 2021-06-18T12:41:17.000Z
Updated: 2024-08-03T18:30:23.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.