TO
Product
Tools
On CISA KEVExploited in the wild
22
CVEs
2
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 13Medium 5Low 2
Watch
Add Tools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-41244 In wildKEV | 7.8 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) Affected: 12.5.0 before 12.5.4; 13.0.0.0 before 13.0.5.0 |
| CVE-2023-34057 | 7.8 | Oct 27 | VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual… Affected: 10.3.0 before 12.1.1 |
| CVE-2022-31676 | 7.8 | Aug 23 | VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability Affected: 10.0.0 before 12.1.0; 10.0.0 before 10.3.25; 11.0.0 before 12.1.0 |
| CVE-2021-21999 | 7.8 | Jun 23 | VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain… Affected: 11.0.0 before 11.2.6 |
| CVE-2016-7080 | 7.8 | Dec 29 | The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference)… Affected: through 10.0.8; 10.0.0; 10.0.5; 10.0.6; 9.0.0; 9.0.1; +17 more |
| CVE-2016-7079 | 7.8 | Dec 29 | The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference)… Affected: through 10.0.8; 10.0.0; 10.0.5; 10.0.6; 9.0.0; 9.0.1; +17 more |
| CVE-2016-5330 | 7.8 | Aug 8 | Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1,… Affected: 9.0.0 through 10.3.22 |
| CVE-2023-34058 | 7.5 | Oct 27 | VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges… Affected: 10.3.0 before 12.3.5 |
| CVE-2023-20900 | 7.5 | Aug 31 | A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html… Affected: 10.3.0 before 12.3.0; 10.3.0 before 10.3.26 |
| CVE-2022-22977 | 7.1 | May 24 | VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerability Affected: 10.0.0 through 10.3.24; 11.0.0 through 11.3.5; 12.0.0 before 12.0.5 |
| CVE-2019-5522 | 7.1 | Jun 6 | VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines Affected: 10.0.0 before 10.3.10 |
| CVE-2020-3941 | 7.0 | Jan 15 | The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed Affected: 10.0.0 before 11.0.0 |
| CVE-2018-6969 | 7.0 | Jul 13 | VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS Affected: before 10.3.0 |
Showing 13