Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:vmware_tools:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductVmware Tools (8e950814-3cdc-5354-abb1-9c6ee9f71156)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-22247 vulnerable 2026-06-08 07:10:52.532655 Insecure file handling vulnerability
MEDIUM (6.1)
VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.
Published: 2025-05-12T10:46:36.155Z
Updated: 2025-11-18T20:05:36.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22230 vulnerable 2026-06-08 07:10:52.506916 Authentication bypass vulnerability
HIGH (7.8)
VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a guest VM may gain ability to perform certain high privilege operations within that VM.
Published: 2025-03-25T14:06:35.413Z
Updated: 2025-03-25T14:19:35.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34058 vulnerable 2026-06-08 06:06:24.346197 Details available
HIGH (7.1)
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
Published: 2023-10-27T04:53:09.935Z
Updated: 2025-03-06T15:40:20.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34057 vulnerable 2026-06-08 06:06:24.341532 Details available
HIGH (7.8)
VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual machine.
Published: 2023-10-27T04:52:55.280Z
Updated: 2025-03-06T15:40:49.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20900 vulnerable 2026-06-08 05:54:18.128779 Details available
HIGH (7.1)
A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
Published: 2023-08-31T09:45:43.130Z
Updated: 2026-10-08T21:13:53.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31676 vulnerable 2026-06-08 05:44:41.101708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.