TO
Product
Tools
On CISA KEVExploited in the wild
22
CVEs
2
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 13Medium 5Low 2
Watch
Add Tools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-41244 In wildKEV | 7.8 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) Affected: 12.5.0 before 12.5.4; 13.0.0.0 before 13.0.5.0 |
| CVE-2023-20867 In wildKEV | 3.9 | Jun 13 | VMware Tools Authentication Bypass Vulnerability Affected: 10.3.0 before 12.2.5 |
| CVE-2023-34057 | 7.8 | Oct 27 | VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual… Affected: 10.3.0 before 12.1.1 |
| CVE-2022-31676 | 7.8 | Aug 23 | VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability Affected: 10.0.0 before 12.1.0; 10.0.0 before 10.3.25; 11.0.0 before 12.1.0 |
| CVE-2021-21999 | 7.8 | Jun 23 | VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain… Affected: 11.0.0 before 11.2.6 |
| CVE-2016-7080 | 7.8 | Dec 29 | The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference)… Affected: through 10.0.8; 10.0.0; 10.0.5; 10.0.6; 9.0.0; 9.0.1; +17 more |
| CVE-2016-7079 | 7.8 | Dec 29 | The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference)… Affected: through 10.0.8; 10.0.0; 10.0.5; 10.0.6; 9.0.0; 9.0.1; +17 more |
| CVE-2016-5330 | 7.8 | Aug 8 | Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1,… Affected: 9.0.0 through 10.3.22 |
| CVE-2023-34058 | 7.5 | Oct 27 | VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges… Affected: 10.3.0 before 12.3.5 |
| CVE-2023-20900 | 7.5 | Aug 31 | A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html… Affected: 10.3.0 before 12.3.0; 10.3.0 before 10.3.26 |
| CVE-2022-22977 | 7.1 | May 24 | VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerability Affected: 10.0.0 through 10.3.24; 11.0.0 through 11.3.5; 12.0.0 before 12.0.5 |
| CVE-2019-5522 | 7.1 | Jun 6 | VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines Affected: 10.0.0 before 10.3.10 |
| CVE-2020-3941 | 7.0 | Jan 15 | The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed Affected: 10.0.0 before 11.0.0 |
| CVE-2018-6969 | 7.0 | Jul 13 | VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS Affected: before 10.3.0 |
| CVE-2022-22943 | 6.7 | Mar 3 | VMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path vulnerability Affected: 10.0.0 before 12.0.0 |
| CVE-2015-5191 | 6.7 | Jul 28 | VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp Affected: through 10.0.8 |
| CVE-2022-31693 | 5.5 | Jun 7 | VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the VM3DMP driver Affected: 10.0.0 before 12.1.5 |
| CVE-2021-21997 | 5.5 | Jun 18 | VMware Tools for Windows (11.x.y prior to 11.3.0) contains a denial-of-service vulnerability in the VM3DMP driver Affected: 11.0.0 before 11.3.0 |
| CVE-2016-5328 | 5.5 | Dec 29 | VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR… Affected: through 10.0.8; 10.0.0; 10.0.5; 10.0.6; 9.0.0; 9.0.1; +17 more |
| CVE-2020-3972 | 3.3 | Jun 19 | VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest File System (HGFS) implementation Affected: 11.0.0 before 11.1.1 |
| CVE-2014-4200 | – | Aug 28 | vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local… Affected: All versions, or not specified |
| CVE-2014-4199 | – | Aug 28 | vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a… Affected: All versions, or not specified |
Showing 22