Vmware Open Vm Tools — known CVE vulnerabilities

Every CVE whose affected-product data names Vmware Open Vm Tools, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-41244 — CVSS 7.8 (high) — actively exploited: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative…
• CVE-2023-34059 — CVSS 7.4 (high): open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges…
• CVE-2023-20900 — CVSS 7.1 (high): A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952…
• CVE-2023-34058 — CVSS 7.1 (high): VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges…
• CVE-2009-1142 — CVSS 6.7 (medium): An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if…