Known vulnerabilities in VMware Tools 11.1.0

Vendor: Broadcom
Software: VMware Tools
Version: 11.1.0
Software CPE: cpe:2.3:a:broadcom:vmware_tools:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Tools version 11.1.0 VMware Tools 11.1.0 is affected by 13 vulnerabilities: 2 high, 3 medium, 8 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116189 - Improper Authorization
CVE-2025-41246
CWE-285 Medium
No
No
12.5.4, 13.0.5.0 30.09.2025 SB2025093026
#VU116185 - Improper Access Control
CVE-2025-41244
CWE-284 High
No
Exploited
12.5.4, 13.0.5.0 30.09.2025 SB2025093024
SB2025093025
SB2025093036
and 21 more
#VU113009 - Missing release of memory after effective lifetime
CVE-2025-41239
CWE-401 Medium
No
No
12.5.3, 13.0.1.0 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 3 more
#VU108928 - Improper input validation
CVE-2025-22247
CWE-20 Low
No
No
12.5.2 12.05.2025 SB2025051234
SB2025051306
SB2025051501
and 9 more
#VU106026 - Improper Access Control
CVE-2025-22230
CWE-284 Low
No
No
12.5.1 25.03.2025 SB2025032555
#VU82520 - Improper Authorization
CVE-2023-34058
CWE-285 Medium
No
No
12.3.5 27.10.2023 SB2023102702
SB2023103031
SB2023103032
and 33 more
#VU77208 - Improper Authentication
CVE-2023-20867
CWE-287 High
No
Exploited
12.2.5 13.06.2023 SB2023061339
SB2023061449
SB2023061649
and 34 more
#VU69696 - Improper input validation
CVE-2022-31693
CWE-20 Low
No
No
12.1.5 29.11.2022 SB2022112944
#VU66726 - Permissions, Privileges, and Access Controls
CVE-2022-31676
CWE-264 Low
No
No
10.3.25, 12.1.0 23.08.2022 SB2022082317
SB2022082416
SB2022082423
and 36 more
#VU63595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-22977
CWE-611 Low
No
No
12.0.5 24.05.2022 SB2022052420
#VU60939 - Untrusted Search Path
CVE-2022-22943
CWE-426 Low
No
No
12.0.0 02.03.2022 SB2022030202
SB2022032127
#VU54314 - Unquoted Search Path or Element
CVE-2021-21999
CWE-428 Low
No
No
11.2.6 22.06.2021 SB2021062226
SB2021101003
#VU54215 - Improper input validation
CVE-2021-21997
CWE-20 Low
No
No
11.3.0 18.06.2021 SB2021061801
SB2021101003