Open Vm Tools (Vmware) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 104 known versions, newest CVE from 2025-09-29. Vendor: Vmware.

CVEs of Open Vm Tools

• CVE-2025-41244 - CVSS 7.8 (high), 2025-09-29: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having…
• CVE-2023-34059 - CVSS 7.4 (high), 2023-10-27: open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to…
• CVE-2023-34058 - CVSS 7.5 (high), 2023-10-27: VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges…
• CVE-2023-20900 - CVSS 7.5 (high), 2023-08-31: A malicious actor that has been granted Guest Operation Privileges…
• CVE-2009-1142 - CVSS 6.7 (medium), 2022-11-23: An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is…