CVE-2025-41244
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
- State
- Published
- Severity
- 7.8 High
- Published
- Sep 29, 2025
- Updated
- Feb 26, 2026
- Reserved
- Apr 16, 2025
Description
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | vmware |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
VCF operationsVMware |
|
VMware toolsVMware |
|
VMware Aria OperationsVMware |
|
VMware Cloud FoundationVMware |
|
VMware Telco Cloud PlatformVMware |
|
VMware Telco Cloud InfrastructureVMware |
|
References
- http://support.broadcom.com/group/ecx/support-content-view/-/support-content/Security%20Advisories/VMSA-2025-0015--VMware-Aria-Operations-and-VMware-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41244-CVE-2025-41245--CVE-2025-41246-/36149
- https://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/exploittechnical-description
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149vendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-41244government-resource
- https://lists.debian.org/debian-lts-announce/2025/10/msg00000.html
- http://www.openwall.com/lists/oss-security/2025/09/29/10
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.