CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-09-29
VMware Tools and Aria Operations Local Privilege Escalation Vulnerability Advisory (CVE-2025-41244)
[Affected Scope] Virtual machines with VMware Tools installed, managed by Aria Operations with SDMP (Service Discovery Management Pack) enabled
[Impact] A malicious local actor with non-administrative privileges can exploit this vulnerability to escalate privileges to root on the same VM
[Mitigation] Immediately apply the official security updates for VMware Tools and Aria Operations as recommended by Broadcom