CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Nov 20, 2025

CVE-2025-41244

High

EPSS 0.5%CISA KEV

Broadcom/VMware Aria Operations and VMware Tools

Description

Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

EPSS — Exploit Probability

0.5%

Higher than 64.1% of all CVEs

Required Action

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149 ; https://nvd.nist.gov/vuln/detail/CVE-2025-41244

Risk Assessment

ELEVATED

In CISA KEV

Details

Severity: High
EPSS: 0.5%
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

Oct 30, 2025

Added to KEV

Oct 30, 2025

Remediation Due

Nov 20, 2025

Affected Product

Broadcom

VMware Aria Operations and VMware Tools

View all Broadcom CVEs

External Links

NVD (NIST)CVE Details MITRE CVE