vulnerability
Ubuntu: USN-7785-1 (CVE-2025-41244): Open VM Tools vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:S/C:C/I:C/A:C) | Sep 29, 2025 | Sep 30, 2025 | Nov 4, 2025 |
Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
Sep 29, 2025
Added
Sep 30, 2025
Modified
Nov 4, 2025
Description
It was discovered that Open VM Tools incorrectly handled permissions with
version checking. An attacker could possibly use this issue to escalate
privileges inside a virtual machine.
This update disables the SDMP get-versions.sh script, so version
information may no longer be made available.
Solution
ubuntu-pro-upgrade-open-vm-tools
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.