CVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools Privilege
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability. Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
- CISA KEV-listed (remediation due 2025-11-20)
- EPSS 0.5% (67.6% percentile)