Vmware Tools vulnerabilities

3 vulnerabilities

Known vulnerabilities in Vmware Tools, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7CVE-2018-6969vmwaretools+1
EPSS score
0.40%
VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate their privileges on the guest VMs. In order to be able to exploit this issue, file sharing must be enabled.6.7CVE-2015-5191debianopen-vm-tools+13
EPSS score
0.33%
VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H7.8CVE-2025-41244debianopen-vm-tools+61KEV
EPSS score
8.63%
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.