[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnqaGFTr7Rn-hz-3guE1R0c2Rsi3FHX5gbN9Xir4KzAk":3,"g5a-family:vmware\u002Ftools":418,"g5a-ex:vmware\u002Ftools@*":419},{"success":4,"data":5},true,{"product":6,"versions":222,"topVulnerabilitiesByEpss":325,"kevVulnerabilities":385,"seoMetadata":396,"meta":415},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":221},"vmware","tools",102,23,2,"2025-09-29",[14,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213,215,217,219],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.0.0",3,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"10.0.12",{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},"10.0.5",{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},"10.0.6",{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},"10.0.8",{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},"10.0.9",{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},"10.1",{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},"10.1.0",{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},"10.1.10",{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},"10.1.15",{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},"10.1.5",{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},"10.1.7",{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},"10.2",{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},"10.2.1",{"version":46,"cve_count":17,"kev_count":17,"has_kev":18},"10.2.5",{"version":48,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.0",{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.10",{"version":52,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.2",{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.20",{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.21",{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.22",{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.25",{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.26",{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.5",{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},"11.0.0",{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},"11.0.1",{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},"11.0.5",{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},"11.1.0",{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},"11.1.1",{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},"11.1.5",{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},"11.2.0",{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},"11.2.1",{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},"11.2.5",{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},"11.2.6",{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},"11.3.0",{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.0",{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.1",{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.5",{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.0",{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.5",{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},"12.3.0",{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},"12.3.5",{"version":102,"cve_count":17,"kev_count":17,"has_kev":18},"12.4.0",{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},"12.4.5",{"version":106,"cve_count":17,"kev_count":17,"has_kev":18},"12.4.6",{"version":108,"cve_count":17,"kev_count":17,"has_kev":18},"12.4.7",{"version":110,"cve_count":17,"kev_count":17,"has_kev":18},"12.4.8",{"version":112,"cve_count":17,"kev_count":17,"has_kev":18},"12.4.9",{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},"12.5.0",{"version":116,"cve_count":17,"kev_count":17,"has_kev":18},"12.5.1",{"version":118,"cve_count":17,"kev_count":17,"has_kev":18},"12.5.2",{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},"12.5.3",{"version":122,"cve_count":17,"kev_count":17,"has_kev":18},"12.5.4",{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},"13.0.0.0",{"version":126,"cve_count":17,"kev_count":17,"has_kev":18},"13.0.1.0",{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},"13.0.5.0",{"version":130,"cve_count":17,"kev_count":17,"has_kev":18},"3.0.0",{"version":132,"cve_count":17,"kev_count":17,"has_kev":18},"3.1.0",{"version":134,"cve_count":17,"kev_count":17,"has_kev":18},"3.1.2.10559",{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},"3.1.2.12031",{"version":138,"cve_count":17,"kev_count":17,"has_kev":18},"3.1.2.12548",{"version":140,"cve_count":17,"kev_count":17,"has_kev":18},"3.1.2.14166",{"version":142,"cve_count":17,"kev_count":17,"has_kev":18},"3.1.2.14664",{"version":144,"cve_count":17,"kev_count":17,"has_kev":18},"3.1.2.15040",{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},"3.1.2.20911",{"version":148,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.1.12458",{"version":150,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.2.14744",{"version":152,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.2.16474",{"version":154,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.2.17586",{"version":156,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.3.17828",{"version":158,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.3.19531",{"version":160,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.3.21653",{"version":162,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.4.24748",{"version":164,"cve_count":17,"kev_count":17,"has_kev":18},"8.3.12.8191",{"version":166,"cve_count":17,"kev_count":17,"has_kev":18},"8.3.2.1593",{"version":168,"cve_count":17,"kev_count":17,"has_kev":18},"8.3.7.3827",{"version":170,"cve_count":17,"kev_count":17,"has_kev":18},"8.3.7.4937",{"version":172,"cve_count":17,"kev_count":17,"has_kev":18},"8.4.6.16648",{"version":174,"cve_count":17,"kev_count":17,"has_kev":18},"8.6.0.6261",{"version":176,"cve_count":17,"kev_count":17,"has_kev":18},"8.8.0.471780",{"version":178,"cve_count":17,"kev_count":17,"has_kev":18},"8.8.0.7539",{"version":180,"cve_count":17,"kev_count":17,"has_kev":18},"8.8.1.528992",{"version":182,"cve_count":17,"kev_count":17,"has_kev":18},"8.8.1.9139",{"version":184,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.0",{"version":186,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.1",{"version":188,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.10",{"version":190,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.11",{"version":192,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.12",{"version":194,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.13",{"version":196,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.15",{"version":198,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.16",{"version":200,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.17",{"version":202,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.5",{"version":204,"cve_count":16,"kev_count":17,"has_kev":18},"9.10.0",{"version":206,"cve_count":16,"kev_count":17,"has_kev":18},"9.10.1",{"version":208,"cve_count":16,"kev_count":17,"has_kev":18},"9.10.5",{"version":210,"cve_count":16,"kev_count":17,"has_kev":18},"9.4.0",{"version":212,"cve_count":16,"kev_count":17,"has_kev":18},"9.4.10",{"version":214,"cve_count":16,"kev_count":17,"has_kev":18},"9.4.11",{"version":216,"cve_count":16,"kev_count":17,"has_kev":18},"9.4.12",{"version":218,"cve_count":16,"kev_count":17,"has_kev":18},"9.4.15",{"version":220,"cve_count":16,"kev_count":17,"has_kev":18},"9.4.5","Tools by Vmware is a technology product with 102 tracked versions and 23 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},{"version":46,"cve_count":17,"kev_count":17,"has_kev":18},{"version":48,"cve_count":17,"kev_count":17,"has_kev":18},{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},{"version":52,"cve_count":17,"kev_count":17,"has_kev":18},{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},{"version":102,"cve_count":17,"kev_count":17,"has_kev":18},{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},{"version":106,"cve_count":17,"kev_count":17,"has_kev":18},{"version":108,"cve_count":17,"kev_count":17,"has_kev":18},{"version":110,"cve_count":17,"kev_count":17,"has_kev":18},{"version":112,"cve_count":17,"kev_count":17,"has_kev":18},{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},{"version":116,"cve_count":17,"kev_count":17,"has_kev":18},{"version":118,"cve_count":17,"kev_count":17,"has_kev":18},{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},{"version":122,"cve_count":17,"kev_count":17,"has_kev":18},{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},{"version":126,"cve_count":17,"kev_count":17,"has_kev":18},{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},{"version":130,"cve_count":17,"kev_count":17,"has_kev":18},{"version":132,"cve_count":17,"kev_count":17,"has_kev":18},{"version":134,"cve_count":17,"kev_count":17,"has_kev":18},{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},{"version":138,"cve_count":17,"kev_count":17,"has_kev":18},{"version":140,"cve_count":17,"kev_count":17,"has_kev":18},{"version":142,"cve_count":17,"kev_count":17,"has_kev":18},{"version":144,"cve_count":17,"kev_count":17,"has_kev":18},{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},{"version":148,"cve_count":17,"kev_count":17,"has_kev":18},{"version":150,"cve_count":17,"kev_count":17,"has_kev":18},{"version":152,"cve_count":17,"kev_count":17,"has_kev":18},{"version":154,"cve_count":17,"kev_count":17,"has_kev":18},{"version":156,"cve_count":17,"kev_count":17,"has_kev":18},{"version":158,"cve_count":17,"kev_count":17,"has_kev":18},{"version":160,"cve_count":17,"kev_count":17,"has_kev":18},{"version":162,"cve_count":17,"kev_count":17,"has_kev":18},{"version":164,"cve_count":17,"kev_count":17,"has_kev":18},{"version":166,"cve_count":17,"kev_count":17,"has_kev":18},{"version":168,"cve_count":17,"kev_count":17,"has_kev":18},{"version":170,"cve_count":17,"kev_count":17,"has_kev":18},{"version":172,"cve_count":17,"kev_count":17,"has_kev":18},{"version":174,"cve_count":17,"kev_count":17,"has_kev":18},{"version":176,"cve_count":17,"kev_count":17,"has_kev":18},{"version":178,"cve_count":17,"kev_count":17,"has_kev":18},{"version":180,"cve_count":17,"kev_count":17,"has_kev":18},{"version":182,"cve_count":17,"kev_count":17,"has_kev":18},{"version":184,"cve_count":16,"kev_count":17,"has_kev":18},{"version":186,"cve_count":16,"kev_count":17,"has_kev":18},{"version":188,"cve_count":16,"kev_count":17,"has_kev":18},{"version":190,"cve_count":16,"kev_count":17,"has_kev":18},{"version":192,"cve_count":16,"kev_count":17,"has_kev":18},{"version":194,"cve_count":16,"kev_count":17,"has_kev":18},{"version":196,"cve_count":16,"kev_count":17,"has_kev":18},{"version":198,"cve_count":16,"kev_count":17,"has_kev":18},{"version":200,"cve_count":16,"kev_count":17,"has_kev":18},{"version":202,"cve_count":16,"kev_count":17,"has_kev":18},{"version":204,"cve_count":16,"kev_count":17,"has_kev":18},{"version":206,"cve_count":16,"kev_count":17,"has_kev":18},{"version":208,"cve_count":16,"kev_count":17,"has_kev":18},{"version":210,"cve_count":16,"kev_count":17,"has_kev":18},{"version":212,"cve_count":16,"kev_count":17,"has_kev":18},{"version":214,"cve_count":16,"kev_count":17,"has_kev":18},{"version":216,"cve_count":16,"kev_count":17,"has_kev":18},{"version":218,"cve_count":16,"kev_count":17,"has_kev":18},{"version":220,"cve_count":16,"kev_count":17,"has_kev":18},[326,334,341,345,350,356,363,369,374,380],{"cveId":327,"description":328,"publishedDate":329,"cvssScore":330,"cvssVersion":331,"severity":332,"isKev":18,"epssScore":333},"CVE-2016-5330","Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.","2016-08-08",7.8,"v3.1","High",0.1802,{"cveId":335,"description":336,"publishedDate":337,"cvssScore":338,"cvssVersion":331,"severity":339,"isKev":4,"epssScore":340},"CVE-2023-20867","A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.","2023-06-13",3.9,"Low",0.1353,{"cveId":342,"description":343,"publishedDate":12,"cvssScore":330,"cvssVersion":331,"severity":332,"isKev":4,"epssScore":344},"CVE-2025-41244","VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.",0.08438,{"cveId":346,"description":347,"publishedDate":348,"cvssScore":330,"cvssVersion":331,"severity":332,"isKev":18,"epssScore":349},"CVE-2021-21999","VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by placing a malicious file renamed as `openssl.cnf' in an unrestricted directory which would allow code to be executed with elevated privileges.","2021-06-23",0.01475,{"cveId":351,"description":352,"publishedDate":353,"cvssScore":354,"cvssVersion":331,"severity":332,"isKev":18,"epssScore":355},"CVE-2023-20900","A malicious actor that has been granted  Guest Operation Privileges https:\u002F\u002Fdocs.vmware.com\u002Fen\u002FVMware-vSphere\u002F8.0\u002Fvsphere-security\u002FGUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https:\u002F\u002Fvdc-download.vmware.com\u002Fvmwb-repository\u002Fdcr-public\u002Fd1902b0e-d479-46bf-8ac9-cee0e31e8ec0\u002F07ce8dbd-db48-4261-9b8f-c6d3ad8ba472\u002Fvim.vm.guest.AliasManager.html .","2023-08-31",7.5,0.01463,{"cveId":357,"description":358,"publishedDate":359,"cvssScore":360,"cvssVersion":331,"severity":361,"isKev":18,"epssScore":362},"CVE-2022-22943","VMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest OS due to an uncontrolled search path element.","2022-03-03",6.7,"Medium",0.01216,{"cveId":364,"description":365,"publishedDate":366,"cvssScore":367,"cvssVersion":331,"severity":332,"isKev":18,"epssScore":368},"CVE-2022-22977","VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or unintended information disclosure.","2022-05-24",7.1,0.00811,{"cveId":370,"description":371,"publishedDate":372,"cvssScore":367,"cvssVersion":331,"severity":332,"isKev":18,"epssScore":373},"CVE-2023-34058","VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https:\u002F\u002Fdocs.vmware.com\u002Fen\u002FVMware-vSphere\u002F8.0\u002Fvsphere-security\u002FGUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https:\u002F\u002Fvdc-download.vmware.com\u002Fvmwb-repository\u002Fdcr-public\u002Fd1902b0e-d479-46bf-8ac9-cee0e31e8ec0\u002F07ce8dbd-db48-4261-9b8f-c6d3ad8ba472\u002Fvim.vm.guest.AliasManager.html .","2023-10-27",0.00672,{"cveId":375,"description":376,"publishedDate":377,"cvssScore":378,"cvssVersion":331,"severity":361,"isKev":18,"epssScore":379},"CVE-2021-21997","VMware Tools for Windows (11.x.y prior to 11.3.0) contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a denial-of-service condition in the Windows guest operating system.","2021-06-18",5.5,0.00652,{"cveId":381,"description":382,"publishedDate":383,"cvssScore":330,"cvssVersion":331,"severity":332,"isKev":18,"epssScore":384},"CVE-2022-31676","VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.","2022-08-23",0.0054,[386,391],{"cveId":342,"description":343,"publishedDate":12,"cvssScore":330,"severity":332,"isKev":4,"epssScore":344,"cisaVulnName":387,"cisaDateAdded":388,"cisaShortDescription":389,"cisaRequiredAction":390},"Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","2025-10-30","Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":335,"description":336,"publishedDate":337,"cvssScore":338,"severity":339,"isKev":4,"epssScore":340,"cisaVulnName":392,"cisaDateAdded":393,"cisaShortDescription":394,"cisaRequiredAction":395},"VMware Tools Authentication Bypass Vulnerability","2023-06-23","VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.","Apply updates per vendor instructions.",{"title":397,"metaDescription":398,"keywords":399,"structuredData":400},"Tools by Vmware - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Tools by Vmware covering 102 versions with 23 tracked vulnerabilities including 0 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Tools vulnerabilities, Tools security, Tools CVE, Vmware Tools, Tools threat intelligence, Vmware security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Tools KEV, Tools exploited vulnerabilities",{"@context":401,"@type":402,"name":403,"description":398,"url":404,"manufacturer":405,"applicationCategory":409,"softwareVersion":410,"mainEntity":411},"https:\u002F\u002Fschema.org","SoftwareApplication","Tools","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fvmware\u002Ftools",{"@type":406,"name":407,"url":408},"Organization","Vmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fvmware","Security Software","102 versions tracked",{"@type":412,"name":413,"description":414,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Tools Security Vulnerabilities","Security vulnerabilities affecting Tools by Vmware",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":416,"apiVersion":417},"2026-10-17T14:55:21.093Z","3.0",[],{"rows":420,"total":11,"capped":18,"failed":17},[421,427],{"cveId":342,"name":387,"severity":332,"cvss":330,"added":388,"epss":344,"published":422,"ranges":423,"checked":4,"hits":426,"covers":18},"2025-09-29T17:15:30.843",[424,425],"12.5.0 to before 12.5.4","13.0.0.0 to before 13.0.5.0",[],{"cveId":335,"name":392,"severity":339,"cvss":338,"added":393,"epss":340,"published":428,"ranges":429,"checked":4,"hits":431,"covers":18},"2023-06-13T17:15:14.07",[430],"10.3.0 to before 12.2.5",[]]