What’s Vulnerable › Products

VMware Tools vulnerabilities

26 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your VMware Tools version is affected

Exploited VMware Tools vulnerabilities

• CVE-2025-41244 — Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
• CVE-2023-20867 — VMware Tools Authentication Bypass Vulnerability

Latest VMware Tools vulnerabilities

• CVE-2025-41244 — Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability (CVSS 7.8) — exploited
• CVE-2025-41246 — Improper authorisation vulnerability (CVSS 7.6)
• CVE-2025-41239 — vSockets information-disclosure vulnerability (CVSS 7.1)
• CVE-2025-22247 — Insecure file handling vulnerability (CVSS 6.1)
• CVE-2025-22230 — Authentication bypass vulnerability (CVSS 7.8)
• CVE-2023-34058 — (CVSS 7.5)
• CVE-2023-34057 — (CVSS 7.8)
• CVE-2023-20900 — (CVSS 7.5)
• CVE-2023-20867 — VMware Tools Authentication Bypass Vulnerability (CVSS 3.9) — exploited
• CVE-2022-31693 — (CVSS 5.5)
• CVE-2022-31676 — (CVSS 7.8)
• CVE-2022-22977 — (CVSS 7.1)
• CVE-2022-22943 — (CVSS 6.7)
• CVE-2021-21999 — (CVSS 7.8)
• CVE-2021-21997 — (CVSS 5.5)
• CVE-2020-3972 — (CVSS 3.3)
• CVE-2020-3941 — (CVSS 7.0)
• CVE-2019-5522 — (CVSS 7.1)
• CVE-2018-6969 — (CVSS 7.0)
• CVE-2015-5191 — (CVSS 6.7)
• CVE-2016-7080 — (CVSS 7.8)
• CVE-2016-7079 — (CVSS 7.8)
• CVE-2016-5328 — (CVSS 5.5)
• CVE-2016-5330 — (CVSS 7.8)
• CVE-2014-4200 — (CVSS 4.7)