VulnCheck KEV: CVE-2025-41244

🗓️ 29 Sep 2025 00:00:00Reported by VulnCheckType

CVE-2025-41244: Local privilege escalation in VMware Aria Operations and Tools lets non-admin VM users with SDMP enabled gain root.

Reporter	Title	Published	Views	Family All 175
GithubExploit	Exploit for CVE-2025-41244	6 Oct 202501:35	–	githubexploit
GithubExploit	Exploit for CVE-2025-41244	30 Sep 202511:40	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by local privilege escalation due to VMware Tools (CVE-2025-41244)	23 Jul 202614:10	–	ibm
Tenable Nessus	Amazon Linux 2023 : open-vm-tools, open-vm-tools-desktop, open-vm-tools-devel (ALAS2023-2025-1226)	15 Oct 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : open-vm-tools, --advisory ALAS2-2025-3036 (ALAS-2025-3036)	15 Oct 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0159: open-vm-tools (ALINUX3-SA-2025:0159)	16 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : open-vm-tools (ALSA-2025:17428)	13 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 10 : open-vm-tools (ALSA-2025:17429)	9 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : open-vm-tools (ALSA-2025:17509)	14 Oct 202500:00	–	nessus
Tenable Nessus	Debian dla-4316 : open-vm-tools - security update	1 Oct 202500:00	–	nessus

Vulncheck

Node

vmware toolsRange12.5.0–12.5.4

vmware toolsRange13.0.0.0–13.0.5.0

Source	Link
console	www.console.vulncheck.com/cve/CVE-2025-41244
blog	www.blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/
cisa	www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
rapid7	www.rapid7.com/cdn/assets/bltbd2f1cd70f9e3e7f/691360b9c91291146f1a5308/threat-landscape-report-q3-2025.pdf
securelist	www.securelist.com/vulnerabilities-and-exploits-in-q3-2025/118197/
loginsoft	www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025

29 Sep 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8

EPSS0.08438

SSVC