CVE-2022-22977

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-05-24 · updated 2026-06-17
Weakness: CWE-611

Description

VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or unintended information disclosure.

Affected products

VMware Tools: from 10.0.0 through 10.3.24; from 11.0.0 through 11.3.5; from 12.0.0 before 12.0.5 — fixed in 12.0.5
VMware Tools for Windows: VMware Tools for Windows (12.0.0, 11.x.y and 10.x.y)

How to fix

Upgrade to a fixed version: VMware Tools 12.0.5. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-22977 or the next vulnerability affects your stack