vmware tools

Name: vmware tools
Brand: vmware

productUS

cpe:2.3:a:vmware:tools:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical12high7medium2low

updated 2026-10-27

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-41244US	—OT critical	8.63% (95th)	KEV	13.0.5.0	2025-09-29	2 versions
CVE-2023-20867US	low3.9OT critical	13.6% (96th)	KEV	12.2.5	2023-06-13	10.3.0 → 12.2.5
CVE-2016-5330US	high7.8	18.0% (97th)	Exploit	no fix	2016-08-08	9.0.0 → 10.3.22
CVE-2021-21999US	high7.8	1.47% (74th)	—	11.2.6	2021-06-23	11.0.0 → 11.2.6
CVE-2023-20900US	high7.5OT elevated	1.47% (74th)	—	12.3.0	2023-08-31	2 versions
CVE-2022-22943US	medium6.7	1.22% (68th)	—	12.0.0	2022-03-03	10.0.0 → 12.0.0
CVE-2022-22977US	high7.1	0.81% (57th)	—	12.0.5	2022-05-24	3 versions
CVE-2023-34058US	high7.5	0.70% (53rd)	—	12.3.5	2023-10-27	10.3.0 → 12.3.5
CVE-2021-21997US	medium5.5	0.65% (51st)	—	11.3.0	2021-06-18	11.0.0 → 11.3.0
CVE-2022-31676US	high7.8	0.55% (46th)	—	10.3.25	2022-08-23	3 versions
CVE-2019-5522US	high7.1	0.50% (43rd)	—	10.3.10	2019-06-06	10.0.0 → 10.3.10
CVE-2014-4199US	medium6.3	0.43% (37th)	—	no fix	2014-08-28	—
CVE-2014-4200US	medium4.7	0.40% (34th)	—	no fix	2014-08-28	—
CVE-2018-6969US	high7.0	0.40% (34th)	—	10.3.0	2018-07-13	< 10.3.0
CVE-2020-3972US	low3.3	0.40% (34th)	—	11.1.1	2020-06-19	11.0.0 → 11.1.1
CVE-2016-7080US	high7.8	0.37% (30th)	—	no fix	2016-12-29	23 versions
CVE-2016-7079US	high7.8	0.37% (30th)	—	no fix	2016-12-29	23 versions
CVE-2016-5328US	medium5.5	0.35% (29th)	—	no fix	2016-12-29	23 versions
CVE-2015-5191US	medium6.7	0.33% (26th)	—	no fix	2017-07-28	≤ 10.0.8
CVE-2020-3941US	high7.0	0.31% (23rd)	—	11.0.0	2020-01-15	10.0.0 → 11.0.0
CVE-2022-31693US	medium5.5	0.23% (14th)	—	12.1.5	2023-06-07	10.0.0 → 12.1.5
CVE-2023-34057US	high7.8	0.19% (9th)	—	12.1.1	2023-10-27	10.3.0 → 12.1.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-264CWE-2642 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs
CWE-426Untrusted Search Path2 CVEs
CWE-427Uncontrolled Search Path Element2 CVEs
CWE-476NULL Pointer Dereference2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE22 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan