Rapid7

vulnerability

F5 Networks: CVE-2022-31676: K87046687: VMware Tools vulnerability CVE-2022-31676

Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
Aug 23, 2022
Added
Dec 7, 2023
Modified
Apr 1, 2026

Description

VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.

Solution

f5-big-ip-upgrade-latest
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.