16686 matches found
VMware Tools and VMware Aria Operations Elevation of Privilege Vulnerability
VMware Tools and VMware Aria Operations are both products of VMware, Inc. VMware Tools is an enhancement tool that comes with VMWare virtual machines and is a driver provided by VMware to enhance the performance of virtual graphics cards and hard drives, as well as to synchronize the clocks of th...
The vulnerability of the Service Discovery Management Pack (SDMP) function in the monitoring tool for VMware Aria Operations and the VMware Tools suite allows a perpetrator to elevate their privileges to the root level.
The vulnerability of the Service Discovery Management Pack SDMP function in the VMware Aria Operations virtual infrastructure monitoring tool and the VMware Tools utility set is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to elevate their...
VMware Tools for Windows Access Control Error Vulnerability
VMware Tools for Windows is a set of Windows-based, VMWare virtual machine enhancement tools from VMware, which are drivers provided by VMware to enhance the performance of virtual graphics cards and hard disks, as well as to synchronize the clocks of the virtual machine with those of the host. A...
Debian dla-4316 : open-vm-tools - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4316 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4316-1 [email protected] https://www.debian.org/lts/security/...
Debian: Security Advisory (DLA-4316-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2025-41244
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate...
CVE-2025-41246
VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs...
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...
SUSE-SU-2025:03436-1 Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373...
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...
SUSE-SU-2025:03435-1 Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373...
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...
SUSE-SU-2025:03434-1 Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373...
Exploit for CVE-2025-41244
CVE-2025-41244 VMware Aria Operations and VMware Tools contai...
Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024
A newly patched security flaw impacting Broadcom VMware Tools and VMware Aria Operations has been exploited in the wild as a zero-day since mid-October 2024 by a threat actor called UNC5174, according to NVISO Labs. The vulnerability in question is CVE-2025-41244 CVSS score: 7.8, a local privileg...
Linux Distros Unpatched Vulnerability : CVE-2025-41244
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having...
Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : Open VM Tools vulnerability (USN-7785-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7785-1 advisory. It was discovered that Open VM Tools incorrectly handled permissions with version checking. An attacker could possibly use this...
Ubuntu: Security Advisory (USN-7785-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
