Do Son CISA adds XWiki (CVE-2025-24893) and VMware (CVE-2025-41244) to its KEV Catalog after confirming active exploitation in the wild.
VMware Tools
A zero-day flaw in VMware Tools (CVE-2025-41244) allows local attackers to gain root privileges. NVISO confirmed exploitation by a Chinese APT. A public PoC is now available.
Broadcom has patched three flaws in VMware Aria Operations and VMware Tools. The vulnerabilities include privilege escalation and information disclosure.
Broadcom releases a VMware Tools update to fix a Moderate severity file handling vulnerability (CVE-2025-22247) affecting Windows and Linux.
Understand CVE-2025-22230: a serious authentication bypass in VMware Tools for Windows that needs immediate attention.
A local privilege escalation (CVE-2023-34057) bug has been discovered in VMware Tools, specifically targeting the macOS operating system
The CVE-2023-20900 vulnerability allows a malevolent actor, positioned in a man-in-the-middle (MITM) network setup between the vCenter server