Broadcom VMware Aria Operations and VMware Tools: VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability ยท updates https://pwn.watch/i/broadcom-vmware-aria-operations-and-vmware-tools-cve-2025-41244 Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM. Added to CISA KEV on 2025-10-30. en Thu, 30 Oct 2025 00:00:00 GMT Broadcom VMware Aria Operations and VMware Tools: VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability: CISA added CVE-2025-41244 to the KEV catalog (due 2025-11-20). https://pwn.watch/i/broadcom-vmware-aria-operations-and-vmware-tools-cve-2025-41244 https://pwn.watch/i/broadcom-vmware-aria-operations-and-vmware-tools-cve-2025-41244#2025-10-30-e1bd8175 Thu, 30 Oct 2025 00:00:00 GMT high <p>Broadcom VMware Aria Operations and VMware Tools: VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability: CISA added CVE-2025-41244 to the KEV catalog (due 2025-11-20).</p>