[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fM8fdGBHSmz8RVKGRwfBOkOYy-RshAMVouu47IQhEb_M":3,"g5a-risk:CVE-2025-41244":187},{"success":4,"data":5,"meta":184},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":26,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":66,"references":67,"referencesCount":88,"weaknesses":89,"weaknessesCount":98,"isActivelyExploited":4,"cisaInfo":99,"otxData":26,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":168,"notableEvents":169},"CVE-2025-41244","What is CVE-2025-41244?","VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.","VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having...","2025-09-29T17:15:30.843","2025-10-31T14:36:10.193",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"security@vmware.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[],[],0.08438,[31,31,31,31,31,31,31],"High",[35,40,43,47,50,53,56,62],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"vmware","aria_operations","*","cpe:2.3:a:vmware:aria_operations:*:*:*:*:*:*:*:*",{"vendor":36,"product":41,"version":38,"criteria":42,"vulnerable":4},"cloud_foundation","cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",{"vendor":36,"product":44,"version":45,"criteria":46,"vulnerable":4},"cloud_foundation_operations","9.0","cpe:2.3:a:vmware:cloud_foundation_operations:9.0:*:*:*:*:*:*:*",{"vendor":36,"product":48,"version":38,"criteria":49,"vulnerable":4},"telco_cloud_infrastructure","cpe:2.3:a:vmware:telco_cloud_infrastructure:*:*:*:*:*:*:*:*",{"vendor":36,"product":51,"version":38,"criteria":52,"vulnerable":4},"telco_cloud_platform","cpe:2.3:a:vmware:telco_cloud_platform:*:*:*:*:*:*:*:*",{"vendor":36,"product":54,"version":38,"criteria":55,"vulnerable":4},"tools","cpe:2.3:a:vmware:tools:*:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":61},"linux","linux_kernel","-","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",false,{"vendor":63,"product":64,"version":59,"criteria":65,"vulnerable":61},"microsoft","windows","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",8,[68,73,79,83],{"url":69,"source":70,"tags":71},"http:\u002F\u002Fsupport.broadcom.com\u002Fgroup\u002Fecx\u002Fsupport-content-view\u002F-\u002Fsupport-content\u002FSecurity%20Advisories\u002FVMSA-2025-0015--VMware-Aria-Operations-and-VMware-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41244-CVE-2025-41245--CVE-2025-41246-\u002F36149","Broadcom",[72],"Permissions Required",{"url":74,"source":75,"tags":76},"https:\u002F\u002Fblog.nviso.eu\u002F2025\u002F09\u002F29\u002Fyou-name-it-vmware-elevates-it-cve-2025-41244\u002F","Nviso",[77,78],"Exploit","Third Party Advisory",{"url":80,"source":70,"tags":81},"https:\u002F\u002Fsupport.broadcom.com\u002Fweb\u002Fecx\u002Fsupport-content-notification\u002F-\u002Fexternal\u002Fcontent\u002FSecurityAdvisories\u002F0\u002F36149",[82],"Vendor Advisory",{"url":84,"source":85,"tags":86},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2025-41244","CISA",[87],"US Government Resource",4,[90],{"id":91,"name":92,"description":93,"extendedDescription":94,"status":95,"abstraction":96,"structure":97},"CWE-267","Privilege Defined With Unsafe Actions","A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.","","Incomplete","Base","Simple",1,{"shortDescription":94,"requiredAction":94,"vulnerabilityName":94,"dateAdded":26},[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2025-41244? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-41244, a high severity cyber security vulnerability from 2025. VMware Aria Operations and VMware Tools contain a local pri...","CVE-2025-41244, CVE-2025-41244 vulnerability, CVE-2025-41244 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, vmware security, linux security, microsoft security, aria_operations vulnerability, cloud_foundation vulnerability, cloud_foundation_operations vulnerability, telco_cloud_infrastructure vulnerability, telco_cloud_platform vulnerability","\u002Fwhat-is\u002Fcve-2025-41244",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-41244","Cybersecurity","CVE-2025-41244, CVE-2025-41244 vulnerability, CVE-2025-41244 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127,149],{"Operator":26,"Negate":26,"Nodes":128},[129],{"Operator":130,"Negate":61,"CPEMatch":131},"OR",[132,136,140,142,146],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":134,"VersionEndExcluding":135,"VersionEndIncluding":26},"B78BDDD1-DE10-4839-9754-3A0D00F47986","8.0","8.18.5",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":138,"VersionEndExcluding":26,"VersionEndIncluding":139},"D1B12C7E-0819-472E-8E79-477B47D603DD","4.0","5.2.2",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":141,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1A8C1A33-352A-4F7E-A284-F966F21EB0B3",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":143,"VersionStartExcluding":26,"VersionStartIncluding":144,"VersionEndExcluding":26,"VersionEndIncluding":145},"904AA81A-D1C3-4DAF-BB2C-C51FEDF5B3F6","2.2","3.0",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":147,"VersionStartExcluding":26,"VersionStartIncluding":138,"VersionEndExcluding":148,"VersionEndIncluding":26},"A9C444F9-5647-451F-B239-252841E440C7","5.0.1",{"Operator":150,"Negate":26,"Nodes":151},"AND",[152,162],{"Operator":130,"Negate":61,"CPEMatch":153},[154,158],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":156,"VersionEndExcluding":157,"VersionEndIncluding":26},"15832760-0347-4BB8-9B78-DE47CBE21957","12.5.0","12.5.4",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":159,"VersionStartExcluding":26,"VersionStartIncluding":160,"VersionEndExcluding":161,"VersionEndIncluding":26},"60F4C0D6-B650-4BE4-9E8F-DBFCFF7D8390","13.0.0.0","13.0.5.0",{"Operator":130,"Negate":61,"CPEMatch":163},[164,166],{"Vulnerable":61,"Criteria":60,"MatchCriteriaID":165,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",{"Vulnerable":61,"Criteria":65,"MatchCriteriaID":167,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[170,177],{"id":171,"eventType":172,"eventTime":173,"details":174,"label":175,"color":176},"36f64d98-a732-4520-bee8-d4431efa5b66","NEW_NVD","2025-09-30T04:01:02.527598+00:00","New CVE added to NVD","Published to NVD","blue",{"id":178,"eventType":179,"eventTime":180,"details":181,"label":182,"color":183},"3b4d2b6c-bbe5-4965-bc34-06d755cd1ae1","NEW_CISA","2025-10-31T04:01:05.580062+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"lastModified":11,"cacheTime":185,"version":186},1792249085194,"2.0",{"score":188,"band":33,"action":189,"scoredAt":190},75,"Emergency patch","2026-10-16T07:09:07.093089+00:00"]