6.1
Medium
CVE-2025-22247 VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a…
Description
VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Tools 12.5 | earliest → < 12.5.2 | 12.5.2 |
Other CVEs of VMware Tools
The 6 CVEs of VMware Tools →
CVE-2025-22230
VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious…
7.8
High
CVE-2023-34058
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest…
7.1
High
CVE-2023-34057
VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest…
7.8
High
CVE-2023-20900
A malicious actor that has been granted Guest Operation Privileges…
7.1
High