CVE-2025-41244 Broadcom VMware Aria Operations And VMware Tools
Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate…
- CVSS
- not scored
On CISA’s exploited list
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
- Added
- 2025-10-30
- Federal patch deadline
- 2025-11-20
- Ransomware use
- not known