Known vulnerabilities in VMware Tools 10.0.0

Vendor: Broadcom
Software: VMware Tools
Version: 10.0.0
Software CPE: cpe:2.3:a:broadcom:vmware_tools:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Tools version 10.0.0 VMware Tools 10.0.0 is affected by 12 vulnerabilities: 1 high, 11 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77208 - Improper Authentication
CVE-2023-20867
CWE-287 High
No
Exploited
12.2.5 13.06.2023 SB2023061339
SB2023061449
SB2023061649
and 34 more
#VU69696 - Improper input validation
CVE-2022-31693
CWE-20 Low
No
No
12.1.5 29.11.2022 SB2022112944
#VU66726 - Permissions, Privileges, and Access Controls
CVE-2022-31676
CWE-264 Low
No
No
10.3.25, 12.1.0 23.08.2022 SB2022082317
SB2022082416
SB2022082423
and 36 more
#VU63595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-22977
CWE-611 Low
No
No
12.0.5 24.05.2022 SB2022052420
#VU60939 - Untrusted Search Path
CVE-2022-22943
CWE-426 Low
No
No
12.0.0 02.03.2022 SB2022030202
SB2022032127
#VU54314 - Unquoted Search Path or Element
CVE-2021-21999
CWE-428 Low
No
No
11.2.6 22.06.2021 SB2021062226
SB2021101003
#VU54215 - Improper input validation
CVE-2021-21997
CWE-20 Low
No
No
11.3.0 18.06.2021 SB2021061801
SB2021101003
#VU24342 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3941
CWE-362 Low
No
No
11.0.0, 11.0.1, 11.0.5 16.01.2020 SB2020011607
#VU18687 - Out-of-bounds read
CVE-2019-5522
CWE-125 Low
No
No
10.3.10 06.06.2019 SB2019060603
#VU13867 - Out-of-bounds read
CVE-2018-6969
CWE-125 Low
No
No
10.3.0 13.07.2018 SB2018071406
#VU7639 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2015-5191
CWE-362 Low
No
No
- 01.08.2017 SB2017072701
SB2017072514
SB2017072515
#VU1104 - Memory corruption
CVE-2016-5328
CWE-119 Low
No
No
- 31.10.2016 SB2016103103
SB2024071254