CVE coverage
View on NVD →
CVE-2025-41244
CVSS 7.8
Actively exploited (KEV)
1 detection found
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential CVE-2025-41244 vmtoolsd LPE Exploitation Attempt | deprecated | 2026-08-03 |