Photon OS 5.0: Expat PHSA-2025-5.0-0502

An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0502. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Freetype2 PHSA-2025-5.0-0499

An update of the freetype2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0499. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

VMware Spring Cloud Config 安全漏洞

VMware Spring Cloud Config is a configuration management solution for distributed systems from VMware. The product primarily provides server and client support for external configuration in distributed systems. A security vulnerability exists in VMware Spring Cloud Config versions 2.2.1 through...

Photon OS 5.0: Iperf PHSA-2025-5.0-0498

An update of the iperf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0498. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-22231

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the appliance running VMware Aria Operations...

USN-7413-1: Linux kernel (IoT) vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Ye Zhang and Nicolas Wu discovered th...

USN-7413-1 linux-iot vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Ye Zhang and Nicolas Wu discovered th...

VMware Aria Operations 8.x < 8.18 HF 5 Privilege Escalation (VMSA-2025-0006)

The version of VMware Aria Operations formerly vRealize Operations running on the remote host is 8.x prior to 8.18 HF 5. It is, therefore, affected by a privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the applianc...

Vulnerability Scanner Detection Related to CVE-2024-7264

Support Statement This Veeam KB article was created to address customers' concerns regarding the detection of the libcurl library by their security software on VMware Backup Proxies, where the VMware VDDK package is installed. Libcurl is a component of VMware VDDK Virtual Disk Development Kit,...

Photon OS 5.0: Libtar PHSA-2024-5.0-0424

An update of the libtar package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0424. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Util PHSA-2024-5.0-0424

An update of the util package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0424. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Open PHSA-2024-5.0-0430

An update of the open package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0430. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libksba PHSA-2024-5.0-0424

An update of the libksba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0424. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-22231

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the appliance running VMware Aria Operations...

CVE-2025-22231 VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the appliance running VMware Aria Operations...

CVE-2025-22231

VMware Aria Operations (8.x, on any host) is affected by a local privilege escalation that allows a user with local admin rights to escalate to root on the appliance. The issue is addressed by patching to 8.18 HF 5 (per VMSA-2025-0006). Connected security advisories indicate a CVSSv3 base score o...

CVE-2025-22231 VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the appliance running VMware Aria Operations...

PT-2025-14620 · Vmware · Vmware Vmfs

Name of the Vulnerable Software and Affected Versions: VMware VMFS affected versions not specified Description: The issue concerns a directory traversal vulnerability in the VMware VMFS file system. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-14111 · Vmware · Vmware Aria Operations

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations affected versions not specified Description: A local privilege escalation vulnerability exists in VMware Aria Operations. An actor with local administrative privileges can escalate their privileges to root on the...

VMware Aria Operations 安全漏洞

VMware Aria Operations is a unified, AI-driven, self-driving IT operations management platform for private, hybrid, and multi-cloud environments from VMware, Inc. A security vulnerability exists in VMware Aria Operations that stems from a local elevation of privilege...