CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
VMware Tools and Aria Operations Local Privilege Escalation Vulnerability Advisory (CVE-2025-41244)
[Affected Scope] Virtual machines with VMware Tools installed, managed by Aria Operations with SDMP (Service Discovery Management Pack) enabled
[Impact] A malicious local actor with non-administrative privileges can exploit this vulnerability to escalate privileges to root on the same VM
[Mitigation] Immediately apply the official security updates for VMware Tools and Aria Operations as recommended by Broadcom
VMware Tools Host-to-Guest Authentication Bypass Vulnerability (CVE-2023-20867) Technical Analysis and Hardening Guide
[Affected Scope] Guest virtual machines running on VMware ESXi hosts with vulnerable versions of VMware Tools or open-vm-tools installed
[Impact] A fully compromised ESXi host can bypass host-to-guest authentication, compromising the confidentiality and integrity of the guest operating system
[Mitigation] Immediately upgrade VMware Tools and open-vm-tools to the latest patched versions provided by VMware and OS vendors