VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-open-vm-toolsalma-upgrade-open-vm-tools-desktopalma-upgrade-open-vm-tools-sdmpalma-upgrade-open-vm-tools-test | Oct 11, 2022 | Aug 23, 2022 | |
| Alpine Linux | alpine-linux-upgrade-open-vm-tools | Aug 22, 2024 | Aug 23, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-open-vm-toolsamazon-linux-ami-2-upgrade-open-vm-tools-debuginfoamazon-linux-ami-2-upgrade-open-vm-tools-desktopamazon-linux-ami-2-upgrade-open-vm-tools-develamazon-linux-ami-2-upgrade-open-vm-tools-salt-minionamazon-linux-ami-2-upgrade-open-vm-tools-sdmpamazon-linux-ami-2-upgrade-open-vm-tools-test | Jul 21, 2023 | Aug 23, 2022 | |
| Centos_linux | — | centos-upgrade-open-vm-toolscentos-upgrade-open-vm-tools-debuginfocentos-upgrade-open-vm-tools-debugsourcecentos-upgrade-open-vm-tools-desktopcentos-upgrade-open-vm-tools-desktop-debuginfocentos-upgrade-open-vm-tools-develcentos-upgrade-open-vm-tools-sdmpcentos-upgrade-open-vm-tools-sdmp-debuginfocentos-upgrade-open-vm-tools-testcentos-upgrade-open-vm-tools-test-debuginfo | Oct 20, 2022 | Aug 23, 2022 |
| Debian | debian-upgrade-open-vm-tools | Aug 26, 2022 | Aug 23, 2022 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Dec 9, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-app-emulation-open-vm-tools | Oct 31, 2022 | Aug 23, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-open-vm-toolsoracle-linux-upgrade-open-vm-tools-desktoporacle-linux-upgrade-open-vm-tools-develoracle-linux-upgrade-open-vm-tools-sdmporacle-linux-upgrade-open-vm-tools-test | Sep 7, 2022 | Aug 23, 2022 |
| Redhat_linux | redhat-upgrade-open-vm-toolsredhat-upgrade-open-vm-tools-debuginforedhat-upgrade-open-vm-tools-debugsourceredhat-upgrade-open-vm-tools-desktopredhat-upgrade-open-vm-tools-desktop-debuginforedhat-upgrade-open-vm-tools-develredhat-upgrade-open-vm-tools-sdmpredhat-upgrade-open-vm-tools-sdmp-debuginforedhat-upgrade-open-vm-tools-testredhat-upgrade-open-vm-tools-test-debuginfo | Oct 20, 2022 | Aug 23, 2022 | |
| Rocky_linux | rocky-upgrade-open-vm-toolsrocky-upgrade-open-vm-tools-debuginforocky-upgrade-open-vm-tools-debugsourcerocky-upgrade-open-vm-tools-desktoprocky-upgrade-open-vm-tools-desktop-debuginforocky-upgrade-open-vm-tools-sdmprocky-upgrade-open-vm-tools-sdmp-debuginforocky-upgrade-open-vm-tools-testrocky-upgrade-open-vm-tools-test-debuginfo | Mar 12, 2024 | Aug 23, 2022 | |
| Suse | — | suse-upgrade-libvmtools-develsuse-upgrade-libvmtools0suse-upgrade-open-vm-toolssuse-upgrade-open-vm-tools-desktopsuse-upgrade-open-vm-tools-salt-minionsuse-upgrade-open-vm-tools-sdmp | Oct 26, 2022 | Aug 23, 2022 |
| Ubuntu | ubuntu-pro-upgrade-open-vm-toolsubuntu-upgrade-open-vm-tools | Aug 25, 2022 | Aug 23, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 23, 2022 | |
| Vmware Vmware Tools | vmware-tools-upgrade-latest | Jun 3, 2025 | Aug 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub