VMware VMware Tools
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-41244 | 13.x.x.x – < 13.0.5.0 ; 12.5.x – < 12.5.4 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025… | HIGH 7.8 | 8.6 % | KEV | |
| CVE-2023-20867 | fixed in 12.2.5 | VMware Tools Authentication Bypass Vulnerability | LOW 3.9 | 14 % | KEV | |
| CVE-2018-6969 | 10.x and prior before 10.3.0 | VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may | HIGH 7.0 | 0.4 % | ||
| CVE-2015-5191 | VMware Tools prior to 10.0.9 | VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Success | MEDIUM 6.7 | 0.3 % |