Lucene search
+L

503 matches found

OSV
OSV
added 2025/05/12 11:15 a.m.14 views

CVE-2025-22247

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM...

6.1AI score
SaveExploits0References4
OSV
OSV
added 2025/05/12 11:15 a.m.5 views

DEBIAN-CVE-2025-22247

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM...

6.1CVSS6.3AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/12 11:15 a.m.9 views

AZL-67797 CVE-2025-22247 affecting package open-vm-tools for versions less than 11.3.0-4

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM...

6.1CVSS5.8AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/12 10:46 a.m.299 views

CVE-2025-22247

CVE-2025-22247 affects open-vm-tools ( VMware Tools open-source components) and can be triggered by a non-administrative guest-VM user due to insecure file handling that may tamper local files, potentially enabling partial integrity impact within the guest. Several advisories confirm affected pac...

6.1CVSS6.2AI score0.00256EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/05/12 10:46 a.m.63 views

CVE-2025-22247 Insecure file handling vulnerability

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM...

6.1CVSS0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/12 10:46 a.m.16 views

CVE-2025-22247 Insecure file handling vulnerability

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM...

6.1CVSS6.2AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/12 12:0 a.m.4 views

VMware Tools 安全漏洞

VMware Tools is an enhancement tool that comes with VMWare virtual machines from VMware, Inc. It is a driver provided by VMware to enhance the performance of virtual graphics cards and hard disks, as well as to synchronize the clocks of the virtual machine with the host computer. A security...

6.1CVSS6.2AI score0.00256EPSS
SaveExploits0References2
VMware
VMware
added 2025/05/12 12:0 a.m.115 views

VMSA-2025-0007: VMware Tools update addresses an insecure file handling vulnerability (CVE-2025-22247)

Advisory ID: | VMSA-2025-0007 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 6.1 Synopsis: | VMware Tools update addresses an insecure file handling vulnerability CVE-2025-22247 Issue date: | 2025-05-12 Updated on: | 2025-05-12 Initial Advisory CVEs | CVE-2025-22247 1. Impacted Products...

6.1CVSS6.7AI score0.00256EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/05/12 12:0 a.m.8 views

UBUNTU-CVE-2025-22247

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM...

6.1CVSS5.8AI score0.00256EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/03/27 2:30 p.m.25 views

CVE-2025-22230

VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a guest VM may gain ability to perform certain high privilege operations within that VM...

7.8CVSS7.3AI score0.00332EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/27 12:0 a.m.113 views

VMware Tools 11.x / 12.x < 12.5.1 Authentication Bypass (VMSA-2025-0005)

The version of VMware Tools installed on the remote Windows host is 11.x or 12.x prior to 12.5.1. It is, therefore, affected by an authentication bypass vulnerability: - VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with...

7.8CVSS8.8AI score0.00332EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2025/03/26 4:20 a.m.30 views

New Security Flaws Found in VMware Tools and CrushFTP — High Risk, PoC Released

Broadcom has issued security patches to address a high-severity security flaw in VMware Tools for Windows that could lead to an authentication bypass. Tracked as CVE-2025-22230, the vulnerability is rated 7.8 on the ten-point Common Vulnerability Scoring System CVSS. "VMware Tools for Windows...

9.8CVSS8.4AI score0.00332EPSS
SaveExploits8
OpenVAS
OpenVAS
added 2025/03/26 12:0 a.m.68 views

VMware Tools Authentication Bypass Vulnerability (VMSA-2025-0005) - Windows

VMware Tools is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:tools";...

7.8CVSS7.3AI score0.00332EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.8 views

The vulnerability of the VMware Tools utility set for Windows operating systems relates to bypassing the authentication process by using an alternative path or channel, allowing an intruder to gain increased privileges.

The vulnerability of the VMware Tools utility for Windows operating systems relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a perpetrator to enhance their privileges within the virtual machine...

7.8CVSS8.1AI score0.00332EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2025/03/25 2:15 p.m.41 views

CVE-2025-22230

VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a guest VM may gain ability to perform certain high privilege operations within that VM...

7.8CVSS0.00332EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/25 2:6 p.m.356 views

CVE-2025-22230

CVE-2025-22230 – VMware Tools for Windows is affected by an authentication bypass due to improper access control. A non-administrative user on a guest VM may abuse this to perform high-privilege operations within the VM. Affected versions include VMware Tools 11.x and 12.x before 12.5.1; remediat...

7.8CVSS7.6AI score0.00332EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/25 2:6 p.m.20 views

CVE-2025-22230 Authentication bypass vulnerability

VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a guest VM may gain ability to perform certain high privilege operations within that VM...

7.8CVSS7.6AI score0.00332EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/25 2:6 p.m.54 views

CVE-2025-22230 Authentication bypass vulnerability

VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a guest VM may gain ability to perform certain high privilege operations within that VM...

7.8CVSS0.00332EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/25 12:0 a.m.34 views

VMware Tools for Windows 安全漏洞

VMware Tools for Windows is a suite of Windows-based enhancement tools from VMware that come with VMWare virtual machines, and it is a driver provided by VMware to enhance the performance of virtual graphics cards and hard disks, as well as to synchronize the clocks of the virtual machine with th...

7.8CVSS9.3AI score0.00332EPSS
SaveExploits0References2
VMware
VMware
added 2025/03/25 12:0 a.m.71 views

VMSA-2025-0005: VMware Tools for Windows update addresses an authentication bypass vulnerability (CVE-2025-22230)

Advisory ID: | VMSA-2025-0005 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.8 Synopsis: | VMware Tools for Windows update addresses an authentication bypass vulnerability CVE-2025-22230 Issue date: | 2025-03-25 Updated on: | 2025-03-25 Initial Advisory CVEs | CVE-2025-22230 1. Impacted...

7.8CVSS7.6AI score0.00332EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder