CVE-2025-41244
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
7.8
CVSS 3.1
8.4 %
EPSS (current)
2025-10-30
KEV addition
No
Ransomware
Timeline
Publication, first public exploit and KEV addition on a day axis.
Key facts
Vendor / product: Broadcom / VMware Aria Operations and VMware Tools
Published: 2025-09-29 · Due (CISA): 2025-11-20
CWE: CWE-267 · EU list: no
Exploit references (metadata only)
No public exploit references recorded.