Known vulnerabilities in VMware Tools

Software: VMware Tools
Software CPE: cpe:2.3:a:vmware:vmware_tools:*:*:*:*:*:*:*:*
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Tools VMware Tools is affected by 20 known vulnerabilities: 2 high, 4 medium, 14 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116189 - Improper Authorization
CVE-2025-41246
CWE-285 Medium
No
No
12.5.4, 13.0.5.0 30.09.2025 SB2025093026
#VU116185 - Improper Access Control
CVE-2025-41244
CWE-284 High
No
Exploited
12.5.4, 13.0.5.0 30.09.2025 SB2025093024
SB2025093025
SB2025093036
and 21 more
#VU113009 - Missing release of memory after effective lifetime
CVE-2025-41239
CWE-401 Medium
No
No
12.5.3, 13.0.1.0 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 3 more
#VU108928 - Improper input validation
CVE-2025-22247
CWE-20 Low
No
No
12.5.2 12.05.2025 SB2025051234
SB2025051306
SB2025051501
and 9 more
#VU106026 - Improper Access Control
CVE-2025-22230
CWE-284 Low
No
No
12.5.1 25.03.2025 SB2025032555
#VU82520 - Improper Authorization
CVE-2023-34058
CWE-285 Medium
No
No
12.3.5 27.10.2023 SB2023102702
SB2023103031
SB2023103032
and 33 more
#VU80188 - Cryptographic Issues
CVE-2023-20900
CWE-310 Medium
No
No
10.3.26, 12.3.0 31.08.2023 SB2023083119
SB2023083154
SB2023083155
and 38 more
#VU77208 - Improper Authentication
CVE-2023-20867
CWE-287 High
No
Exploited
12.2.5 13.06.2023 SB2023061339
SB2023061449
SB2023061649
and 34 more
#VU69696 - Improper input validation
CVE-2022-31693
CWE-20 Low
No
No
12.1.5 29.11.2022 SB2022112944
#VU66726 - Permissions, Privileges, and Access Controls
CVE-2022-31676
CWE-264 Low
No
No
10.3.25, 12.1.0 23.08.2022 SB2022082317
SB2022082416
SB2022082423
and 36 more
#VU63595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-22977
CWE-611 Low
No
No
12.0.5 24.05.2022 SB2022052420
#VU60939 - Untrusted Search Path
CVE-2022-22943
CWE-426 Low
No
No
12.0.0 02.03.2022 SB2022030202
SB2022032127
#VU54314 - Unquoted Search Path or Element
CVE-2021-21999
CWE-428 Low
No
No
11.2.6 22.06.2021 SB2021062226
SB2021101003
#VU54215 - Improper input validation
CVE-2021-21997
CWE-20 Low
No
No
11.3.0 18.06.2021 SB2021061801
SB2021101003
#VU29174 - Improper input validation
CVE-2020-3972
CWE-20 Low
No
No
11.1.1 19.06.2020 SB2020061922
#VU24342 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3941
CWE-362 Low
No
No
11.0.0, 11.0.1, 11.0.5 16.01.2020 SB2020011607
#VU18687 - Out-of-bounds read
CVE-2019-5522
CWE-125 Low
No
No
10.3.10 06.06.2019 SB2019060603
#VU13867 - Out-of-bounds read
CVE-2018-6969
CWE-125 Low
No
No
10.3.0 13.07.2018 SB2018071406
#VU7639 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2015-5191
CWE-362 Low
No
No
- 01.08.2017 SB2017072701
SB2017072514
SB2017072515
#VU1104 - Memory corruption
CVE-2016-5328
CWE-119 Low
No
No
- 31.10.2016 SB2016103103
SB2024071254