EXPOSURES › CVE-2025-41244

CVE-2025-41244

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2025-10-30 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-41244 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatchedrce

Broadcom's VMware Aria Operations and VMware Tools allow local non-admins to escalate to root via unpatched SDMP vulnerability.

Broadcom's VMware Aria Operations and VMware Tools have a critical unpatched vulnerability that enables local non-administrative users to escalate privileges to root on VMs, posing a significant security risk to DIB organizations.

Shame score — Critical unpatched vulnerability enabling escalation of privileges to root, directly impacting DIB security.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Broadcom · vendor VMware Aria Operations and VMware Tools · product

DESCRIPTION

Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

AFFECTED FEDRAMP PRODUCTS · 4

PRODUCT	PROVIDER	STATUS	MATCH
Clarity Broadcom	Broadcom	Authorized	vendor-exact · 0.90
General Support Systems (GSS) Broadcom	Broadcom	Authorized	vendor-exact · 0.90
Rally Broadcom	Broadcom	Authorized	vendor-exact · 0.90
Symantec Gov Cloud Security (GCS) Broadcom	Broadcom	In Process	vendor-exact · 0.90