Known Exploited Vulnerabilities October 30, 2025 · CISA KEV Catalog

CVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Broadcom CVE-2025-41244
Related: CVE-2026-41709: Broadcom VMWare ESX Insufficient Logging Vulnerability Known Exploited Vulnerabilities · Oct 28, 2026
CVE-2026-59310: Broadcom VMware vCenter Path Traversal Vulnerability Known Exploited Vulnerabilities · Aug 18, 2026
CVE-2026-22719: Broadcom VMware Aria Operations Command Injection Vulnerability Known Exploited Vulnerabilities · Mar 03, 2026