Skip to content

Product

azure linux open-vm-tools vulnerabilities

2 published CVES affecting azure linux open-vm-tools, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
1

Latest azure linux open-vm-tools CVEs

Newest publication first

  1. CVE-2025-41244 VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    Published
    HighCVSS 7.8 EPSS 16.4% CISA KEV added 2025-10-30 Exploited in the wild

    VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability...

  2. CVE-2025-22247 Insecure file handling vulnerability

    Published
    MediumCVSS 6.1 EPSS 0.27%

    VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.