CVE-2025-41244

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 8,4%

Kerentanan Privilege Defined With Unsafe Actions pada vmware aria operations, vmware cloud foundation +6 lainnya. Skor CVSS 3.1 7.8 (High) menurut vmware.com. Masuk katalog KEV CISA pada 30 Oktober 2025, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

Rincian

Terbit di NVD

29 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber vmware.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-267: Privilege Defined With Unsafe Actions

EPSS (30 hari)

8,4% peluang dieksploitasi; lebih tinggi dari 94,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Masuk KEV

30 Oktober 2025

Tenggat CISA

20 November 2025 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/3614... advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-41244 pemerintah AS
• http://www.openwall.com/lists/oss-security/2025/09/29/10 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/10/msg00000.html mailing list · advisory pihak ketiga
• https://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/ exploit · advisory pihak ketiga
• http://support.broadcom.com/group/ecx/support-content-view/-/support-content/Security%20Advisories/VMSA-2025-0... permissions required