Known vulnerabilities in VMware Tools 12.4.5
Vendor:
Broadcom
Software:
VMware Tools
Version:
12.4.5
Software CPE:
cpe:2.3:a:broadcom:vmware_tools:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
1
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
12.5.4
13.0.5.0
13.0.1.0
12.5.3
13.0.0
12.5.2
12.5.1
12.5.0
12.4.5
12.0.6
12.4.0
12.3.5
12.3.0
10.3.26
12.2.6
12.2.5
12.2.0
12.1.5
10.3.25
10.3.24
10.3.19
10.3.18
10.3.17
10.3.16
10.3.15
10.3.14
10.3.13
10.3.12
10.3.11
10.3.9
10.3.8
10.3.7
10.3.6
10.3.4
10.3.3
10.3.1
12.1.0
12.0.5
12.0.0
11.3.5
11.3.0
11.2.6
11.2.5
11.2.1
11.2.0
11.1.5
11.1.0
11.0.6
10.3.23
10.3.22
11.1.1
11.0.5
11.0.1
11.0.0
10.3.21
10.3.20
10.3.10
10.3.5
10.3.2
10.3.0
10.2.5
10.2.1
10.2.0
10.1.15
10.1.10
10.1.7
10.1.5
10.0.12
9.0.5
9.0.1
9.0.0
9.4.15
9.4.12
9.4.11
9.4.10
9.4.6
9.4.5
9.4.0
9.10.0
9.10.1
9.10.5
10.0.9
10.0.8
10.0.6
10.0.5
10.1.0
10.0.0
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU116189 - Improper Authorization CVE-2025-41246 |
CWE-285 | Medium | 12.5.4, 13.0.5.0 | 30.09.2025 |
SB2025093026 |
||
| #VU116185 - Improper Access Control CVE-2025-41244 |
CWE-284 | High | 12.5.4, 13.0.5.0 | 30.09.2025 |
SB2025093024 SB2025093025 SB2025093036 and 21 more |
||
| #VU113009 - Missing release of memory after effective lifetime CVE-2025-41239 |
CWE-401 | Medium | 12.5.3, 13.0.1.0 | 17.07.2025 |
SB2025071701 SB2025071702 SB2025071703 and 3 more |
||
| #VU108928 - Improper input validation CVE-2025-22247 |
CWE-20 | Low | 12.5.2 | 12.05.2025 |
SB2025051234 SB2025051306 SB2025051501 and 9 more |
||
| #VU106026 - Improper Access Control CVE-2025-22230 |
CWE-284 | Low | 12.5.1 | 25.03.2025 |
SB2025032555 |