Known vulnerabilities in VMware Tools 12.1.0
Vendor:
Broadcom
Software:
VMware Tools
Version:
12.1.0
Software CPE:
cpe:2.3:a:broadcom:vmware_tools:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
9
Public exploits:
0
Known exploited (KEV):
2
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
12.5.4
13.0.5.0
13.0.1.0
12.5.3
13.0.0
12.5.2
12.5.1
12.5.0
12.4.5
12.0.6
12.4.0
12.3.5
12.3.0
10.3.26
12.2.6
12.2.5
12.2.0
12.1.5
10.3.25
10.3.24
10.3.19
10.3.18
10.3.17
10.3.16
10.3.15
10.3.14
10.3.13
10.3.12
10.3.11
10.3.9
10.3.8
10.3.7
10.3.6
10.3.4
10.3.3
10.3.1
12.1.0
12.0.5
12.0.0
11.3.5
11.3.0
11.2.6
11.2.5
11.2.1
11.2.0
11.1.5
11.1.0
11.0.6
10.3.23
10.3.22
11.1.1
11.0.5
11.0.1
11.0.0
10.3.21
10.3.20
10.3.10
10.3.5
10.3.2
10.3.0
10.2.5
10.2.1
10.2.0
10.1.15
10.1.10
10.1.7
10.1.5
10.0.12
9.0.5
9.0.1
9.0.0
9.4.15
9.4.12
9.4.11
9.4.10
9.4.6
9.4.5
9.4.0
9.10.0
9.10.1
9.10.5
10.0.9
10.0.8
10.0.6
10.0.5
10.1.0
10.0.0
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU116189 - Improper Authorization CVE-2025-41246 |
CWE-285 | Medium | 12.5.4, 13.0.5.0 | 30.09.2025 |
SB2025093026 |
||
| #VU116185 - Improper Access Control CVE-2025-41244 |
CWE-284 | High | 12.5.4, 13.0.5.0 | 30.09.2025 |
SB2025093024 SB2025093025 SB2025093036 and 21 more |
||
| #VU113009 - Missing release of memory after effective lifetime CVE-2025-41239 |
CWE-401 | Medium | 12.5.3, 13.0.1.0 | 17.07.2025 |
SB2025071701 SB2025071702 SB2025071703 and 3 more |
||
| #VU108928 - Improper input validation CVE-2025-22247 |
CWE-20 | Low | 12.5.2 | 12.05.2025 |
SB2025051234 SB2025051306 SB2025051501 and 9 more |
||
| #VU106026 - Improper Access Control CVE-2025-22230 |
CWE-284 | Low | 12.5.1 | 25.03.2025 |
SB2025032555 |
||
| #VU82520 - Improper Authorization CVE-2023-34058 |
CWE-285 | Medium | 12.3.5 | 27.10.2023 |
SB2023102702 SB2023103031 SB2023103032 and 33 more |
||
| #VU80188 - Cryptographic Issues CVE-2023-20900 |
CWE-310 | Medium | 10.3.26, 12.3.0 | 31.08.2023 |
SB2023083119 SB2023083154 SB2023083155 and 38 more |
||
| #VU77208 - Improper Authentication CVE-2023-20867 |
CWE-287 | High | 12.2.5 | 13.06.2023 |
SB2023061339 SB2023061449 SB2023061649 and 34 more |
||
| #VU69696 - Improper input validation CVE-2022-31693 |
CWE-20 | Low | 12.1.5 | 29.11.2022 |
SB2022112944 |