{"id":"CVE-2025-22247","aliases":["ALBA-2025:20841","ALSA-2025:A001","ALSA-2025:A002","ALSA-2025:A003","AZL-67797","AZL-67806","CLSA-2025-1751133361","DEBIAN-CVE-2025-22247","DLA-4165-1","DSA-5919-1","EUVD-2025-14280","GHSA-mqmq-2p8r-q32f","MGASA-2025-0166","RHBA-2025:20841","RHBA-2026:0860","SUSE-SU-2025:01565-1","SUSE-SU-2025:01658-1","SUSE-SU-2025:01778-1","SUSE-SU-2025:1565-1","SUSE-SU-2025:20379-1","SUSE-SU-2025:20452-1","UBUNTU-CVE-2025-22247","USN-7508-1","USN-7508-2","openSUSE-SU-2025:15090-1"],"status":"published","title":"Insecure file handling vulnerability","description":"VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00269,"percentile":0.19271,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2025-05-12T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"open-vm-tools","fixed_in":["13.0.0-1.el9_7.1","12.5.0-1.el9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"open-vm-tools-desktop","fixed_in":["13.0.0-1.el9_7.1","12.5.0-1.el9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"open-vm-tools-salt-minion","fixed_in":["13.0.0-1.el9_7.1","12.5.0-1.el9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"open-vm-tools-sdmp","fixed_in":["13.0.0-1.el9_7.1","12.5.0-1.el9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"open-vm-tools-test","fixed_in":["13.0.0-1.el9_7.1","12.5.0-1.el9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"open-vm-tools","fixed_in":["12.3.5-2.el8.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"open-vm-tools-desktop","fixed_in":["12.3.5-2.el8.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"open-vm-tools-devel","fixed_in":["12.3.5-2.el8.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"open-vm-tools-salt-minion","fixed_in":["12.3.5-2.el8.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"open-vm-tools-sdmp","fixed_in":["12.3.5-2.el8.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"open-vm-tools-test","fixed_in":["12.3.5-2.el8.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"open-vm-tools-devel","fixed_in":["12.5.0-1.el9.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"open-vm-tools","fixed_in":["12.5.0-1.el10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"open-vm-tools-desktop","fixed_in":["12.5.0-1.el10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"open-vm-tools-devel","fixed_in":["12.5.0-1.el10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"open-vm-tools-salt-minion","fixed_in":["12.5.0-1.el10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"open-vm-tools-sdmp","fixed_in":["12.5.0-1.el10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"open-vm-tools-test","fixed_in":["12.5.0-1.el10.alma.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"open-vm-tools","fixed_in":["11.3.0-4"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"open-vm-tools","fixed_in":["12.3.5-2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools","fixed_in":["12.1.5-1.el9.3.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-desktop","fixed_in":["12.1.5-1.el9.3.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-devel","fixed_in":["12.1.5-1.el9.3.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-salt-minion","fixed_in":["12.1.5-1.el9.3.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-sdmp","fixed_in":["12.1.5-1.el9.3.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-test","fixed_in":["12.1.5-1.el9.3.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"open-vm-tools","fixed_in":["2:12.2.0-1+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"open-vm-tools","fixed_in":["2:12.5.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"open-vm-tools","fixed_in":["2:12.5.0-2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"open-vm-tools","fixed_in":["2:11.2.5-2+deb11u4"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"open-vm-tools","fixed_in":["12.3.5-2.1.mga9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools","fixed_in":["0:13.0.0-1.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:13.0.0-1.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:13.0.0-1.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-desktop","fixed_in":["0:13.0.0-1.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:13.0.0-1.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-salt-minion","fixed_in":["0:13.0.0-1.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-sdmp","fixed_in":["0:13.0.0-1.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-sdmp-debuginfo","fixed_in":["0:13.0.0-1.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-test","fixed_in":["0:13.0.0-1.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:13.0.0-1.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools","fixed_in":["0:12.3.5-2.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:12.3.5-2.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:12.3.5-2.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-desktop","fixed_in":["0:12.3.5-2.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:12.3.5-2.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-salt-minion","fixed_in":["0:12.3.5-2.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-sdmp","fixed_in":["0:12.3.5-2.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-sdmp-debuginfo","fixed_in":["0:12.3.5-2.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:12.3.5-2.el8_10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"open-vm-tools","fixed_in":["12.5.2-150600.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"open-vm-tools","fixed_in":["12.5.2-150600.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"open-vm-tools","fixed_in":["12.5.2-150600.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"open-vm-tools","fixed_in":["12.5.2-150300.58.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"open-vm-tools","fixed_in":["12.5.2-150300.58.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"open-vm-tools","fixed_in":["12.5.2-150300.58.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"open-vm-tools","fixed_in":["12.5.2-150300.58.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"open-vm-tools","fixed_in":["12.5.2-150300.58.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"open-vm-tools","fixed_in":["12.5.2-4.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"open-vm-tools","fixed_in":["12.5.2-150600.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"open-vm-tools","fixed_in":["12.5.2-150600.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"open-vm-tools","fixed_in":["12.5.2-150600.3.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"open-vm-tools","fixed_in":["12.5.2-150600.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"open-vm-tools","fixed_in":["12.5.2-1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"open-vm-tools","fixed_in":["12.5.2-slfo.1.1_1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-vm-tools","fixed_in":["2:10.2.0-3~ubuntu0.16.04.1+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-vm-tools","fixed_in":["2:11.0.5-4ubuntu0.18.04.3+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"open-vm-tools","fixed_in":["2:11.3.0-2ubuntu0~ubuntu20.04.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"open-vm-tools","fixed_in":["2:12.3.5-3~ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"open-vm-tools","fixed_in":["2:12.4.5-1~ubuntu0.24.04.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"open-vm-tools","fixed_in":["12.5.2-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.5-2.el8.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.5-2.el8.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.5-2.el8.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.5-2.el8.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.5-2.el8.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.5-2.el8.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el9.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-1.el10.alma.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.0-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.5-2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.0-1+deb12u3"}]}],"versions":["2:12.2.0-1","2:12.2.0-1+deb12u1","2:12.2.0-1+deb12u1~bpo11+1","2:12.2.0-1+deb12u2","2:12.2.0-1+deb12u2~bpo10+1","2:12.2.0-1+deb12u2~bpo11+1"]},{"source":"osv","ecosystem":"Debian:13","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.5.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.5.0-2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.2.5-2+deb11u4"}]}],"versions":["2:11.2.5-2","2:11.2.5-2+deb11u1","2:11.2.5-2+deb11u2","2:11.2.5-2+deb11u3","2:11.2.5-2+deb11u3~bpo10+1"]},{"source":"osv","ecosystem":"Debian:12","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.0-1+deb12u3"}]}],"versions":["2:12.2.0-1","2:12.2.0-1+deb12u1","2:12.2.0-1+deb12u1~bpo11+1","2:12.2.0-1+deb12u2","2:12.2.0-1+deb12u2~bpo10+1","2:12.2.0-1+deb12u2~bpo11+1"]},{"source":"osv","ecosystem":"Mageia:9","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.5-2.1.mga9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.5-2.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.5-2.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.5-2.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.5-2.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.5-2.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.5-2.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.5-2.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.5-2.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.3.5-2.el8_10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150600.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150600.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150600.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150300.58.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150300.58.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150300.58.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150300.58.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150300.58.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-4.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150600.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150600.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150600.3.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-150600.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-slfo.1.1_1.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:10.2.0-3~ubuntu0.16.04.1+esm5"}]}],"versions":["2:9.10.2-2822639-1ubuntu3","2:10.0.0-3000743-3ubuntu1","2:10.0.7-3227872-2ubuntu1","2:10.0.7-3227872-5ubuntu1~16.04.1","2:10.0.7-3227872-5ubuntu1~16.04.2","2:10.2.0-3~ubuntu0.16.04.1","2:10.2.0-3~ubuntu0.16.04.1+esm1","2:10.2.0-3~ubuntu0.16.04.1+esm2","2:10.2.0-3~ubuntu0.16.04.1+esm3","2:10.2.0-3~ubuntu0.16.04.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.0.5-4ubuntu0.18.04.3+esm4"}]}],"versions":["2:10.1.10-3","2:10.1.10-3build1","2:10.1.15-1","2:10.1.15-1build1","2:10.2.0-2","2:10.2.0-2build1","2:10.2.0-3","2:10.2.0-3ubuntu1","2:10.2.0-3ubuntu2","2:10.2.0-3ubuntu3","2:10.3.0-0ubuntu1~18.04.1","2:10.3.0-0ubuntu1~18.04.2","2:10.3.0-0ubuntu1~18.04.3","2:10.3.5-7~ubuntu0.18.04.1","2:10.3.10-1~ubuntu0.18.04.1","2:11.0.1-2ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.1","2:11.0.5-4ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.3","2:11.0.5-4ubuntu0.18.04.3+esm1","2:11.0.5-4ubuntu0.18.04.3+esm2","2:11.0.5-4ubuntu0.18.04.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.3.0-2ubuntu0~ubuntu20.04.8"}]}],"versions":["2:10.3.10-3ubuntu1","2:11.0.1-2","2:11.0.1-3","2:11.0.1-3ubuntu1","2:11.0.1-4","2:11.0.5-1","2:11.0.5-2","2:11.0.5-3","2:11.0.5-4","2:11.1.0-2~ubuntu20.04.1","2:11.1.5-1~ubuntu20.04.2","2:11.2.5-2ubuntu1~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.2","2:11.3.0-2ubuntu0~ubuntu20.04.3","2:11.3.0-2ubuntu0~ubuntu20.04.4","2:11.3.0-2ubuntu0~ubuntu20.04.5","2:11.3.0-2ubuntu0~ubuntu20.04.6","2:11.3.0-2ubuntu0~ubuntu20.04.7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.3.5-3~ubuntu0.22.04.2"}]}],"versions":["2:11.3.0-2ubuntu1","2:11.3.0-2ubuntu2","2:11.3.5-1","2:11.3.5-1ubuntu2","2:11.3.5-1ubuntu3","2:11.3.5-1ubuntu4","2:11.3.5-1ubuntu4.1","2:12.1.0-1~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.2","2:12.1.5-3~ubuntu0.22.04.3","2:12.1.5-3~ubuntu0.22.04.4","2:12.3.5-3~ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.4.5-1~ubuntu0.24.04.2"}]}],"versions":["2:12.3.0-1","2:12.3.5-1","2:12.3.5-3","2:12.3.5-4","2:12.3.5-5build1","2:12.3.5-5build2","2:12.3.5-5build3","2:12.4.5-1~ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.3.0-2ubuntu0~ubuntu20.04.8"}]}],"versions":["2:10.3.10-3ubuntu1","2:11.0.1-2","2:11.0.1-3","2:11.0.1-3ubuntu1","2:11.0.1-4","2:11.0.5-1","2:11.0.5-2","2:11.0.5-3","2:11.0.5-4","2:11.1.0-2~ubuntu20.04.1","2:11.1.5-1~ubuntu20.04.2","2:11.2.5-2ubuntu1~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.2","2:11.3.0-2ubuntu0~ubuntu20.04.3","2:11.3.0-2ubuntu0~ubuntu20.04.4","2:11.3.0-2ubuntu0~ubuntu20.04.5","2:11.3.0-2ubuntu0~ubuntu20.04.6","2:11.3.0-2ubuntu0~ubuntu20.04.7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.3.5-3~ubuntu0.22.04.2"}]}],"versions":["2:11.3.0-2ubuntu1","2:11.3.0-2ubuntu2","2:11.3.5-1","2:11.3.5-1ubuntu2","2:11.3.5-1ubuntu3","2:11.3.5-1ubuntu4","2:11.3.5-1ubuntu4.1","2:12.1.0-1~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.2","2:12.1.5-3~ubuntu0.22.04.3","2:12.1.5-3~ubuntu0.22.04.4","2:12.3.5-3~ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.4.5-1~ubuntu0.24.04.2"}]}],"versions":["2:12.3.0-1","2:12.3.5-1","2:12.3.5-3","2:12.3.5-4","2:12.3.5-5build1","2:12.3.5-5build2","2:12.3.5-5build3","2:12.4.5-1~ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:10.2.0-3~ubuntu0.16.04.1+esm5"}]}],"versions":["2:9.10.2-2822639-1ubuntu3","2:10.0.0-3000743-3ubuntu1","2:10.0.7-3227872-2ubuntu1","2:10.0.7-3227872-5ubuntu1~16.04.1","2:10.0.7-3227872-5ubuntu1~16.04.2","2:10.2.0-3~ubuntu0.16.04.1","2:10.2.0-3~ubuntu0.16.04.1+esm1","2:10.2.0-3~ubuntu0.16.04.1+esm2","2:10.2.0-3~ubuntu0.16.04.1+esm3","2:10.2.0-3~ubuntu0.16.04.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.0.5-4ubuntu0.18.04.3+esm4"}]}],"versions":["2:10.1.10-3","2:10.1.10-3build1","2:10.1.15-1","2:10.1.15-1build1","2:10.2.0-2","2:10.2.0-2build1","2:10.2.0-3","2:10.2.0-3ubuntu1","2:10.2.0-3ubuntu2","2:10.2.0-3ubuntu3","2:10.3.0-0ubuntu1~18.04.1","2:10.3.0-0ubuntu1~18.04.2","2:10.3.0-0ubuntu1~18.04.3","2:10.3.5-7~ubuntu0.18.04.1","2:10.3.10-1~ubuntu0.18.04.1","2:11.0.1-2ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.1","2:11.0.5-4ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.3","2:11.0.5-4ubuntu0.18.04.3+esm1","2:11.0.5-4ubuntu0.18.04.3+esm2","2:11.0.5-4ubuntu0.18.04.3+esm3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.2-1.1"}]}]}],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683","tags":["web","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2025/05/12/2","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/05/13/2","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00017.html","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/09/24/3"},{"url":"http://www.openwall.com/lists/oss-security/2025/09/25/3"},{"url":"http://www.openwall.com/lists/oss-security/2025/09/25/5"},{"url":"http://www.openwall.com/lists/oss-security/2025/09/26/1"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22247","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-mqmq-2p8r-q32f"},{"url":"https://access.redhat.com/errata/RHBA-2025:20841","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALBA-2025-20841.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-22247.html","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-22247","tags":["report"]},{"url":"https://bugzilla.redhat.com/2364261","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-A001.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-A002.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-A003.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1751133361.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-22247","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0166.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34271","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/05/12/2","tags":["web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YDQBVVMNJB6EXDLSUNBCHZTNRBLXJEFU/","tags":["web"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.7_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_20841.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2364261","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-22247","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHBA-2026:0860","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhba-2026_0860.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501565-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237147","tags":["report"]},{"url":"https://bugzilla.suse.com/1241938","tags":["report"]},{"url":"https://bugzilla.suse.com/1243106","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22247","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501658-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237180","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501778-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251565-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520379-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520452-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-22247","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7508-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7508-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-22247","title":"Insecure file handling vulnerability","description":"VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.","status":"published","published":"2025-05-12T10:46:36.155Z","modified":"2025-11-18T20:05:36.855Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:32:28.943062Z"}],"euvd":[{"id":"EUVD-2025-14280","description":"VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.","status":"published","published":"2025-05-12T10:46:36Z","modified":"2025-11-18T20:05:36Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:15.806163Z"}],"ghsa":[{"id":"GHSA-mqmq-2p8r-q32f","title":"VMware Tools contains an insecure file handling vulnerability. A malicious actor with non...","description":"VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.","status":"published","published":"2025-05-12T12:30:25Z","modified":"2025-11-18T21:32:29Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T15:04:51.826106Z"}],"nvd":[{"id":"CVE-2025-22247","description":"VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.","status":"published","published":"2025-05-12T11:15:49.85Z","modified":"2026-06-17T08:45:54.207Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:11:07.176032Z"}],"osv":[{"id":"DEBIAN-CVE-2025-22247","description":"VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.","status":"published","published":"2025-05-12T11:15:49.85Z","modified":"2026-09-01T20:05:44.319161Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:45.524682Z"},{"id":"RHBA-2025:20841","title":"Red Hat Bug Fix Advisory: open-vm-tools bug fix and enhancement update","status":"published","published":"2025-11-14T10:09:47Z","modified":"2026-09-02T10:04:03Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2026:0860","title":"Red Hat Bug Fix Advisory: open-vm-tools bug fix and enhancement update","status":"published","published":"2026-01-23T10:13:14Z","modified":"2026-09-02T10:07:57Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"UBUNTU-CVE-2025-22247","description":"VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.","status":"published","published":"2025-05-12T00:00:00Z","modified":"2026-04-22T15:38:51.126095Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"ALBA-2025:20841","title":"Moderate: open-vm-tools bug fix and enhancement update","description":"For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.\n","status":"published","published":"2025-11-11T00:00:00Z","modified":"2026-10-29T11:30:07.752239752Z","updated_at":"2026-11-02T15:27:45.973197Z"},{"id":"ALSA-2025:A001","title":"Moderate: open-vm-tools security update","description":"The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.\n\nSecurity Fix(es):\n\n* open-vm-tools:A malicious actor with non-administrative privileges on a guest virtual machine (VM) may tamper with the local files to trigger insecure file operations within that VM. (CVE-2025-22247)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-06-20T00:00:00Z","modified":"2026-10-29T11:02:28.44917588Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2025:A002","title":"Moderate: open-vm-tools security update","description":"The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.\n\nSecurity Fix(es):\n\n* open-vm-tools:A malicious actor with non-administrative privileges on a guest virtual machine (VM) may tamper with the local files to trigger insecure file operations within that VM. (CVE-2025-22247)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-06-20T00:00:00Z","modified":"2026-10-29T11:32:13.429595135Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2025:A003","title":"Moderate: open-vm-tools security update","description":"The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.\n\nSecurity Fix(es):\n\n* open-vm-tools:A malicious actor with non-administrative privileges on a guest virtual machine (VM) may tamper with the local files to trigger insecure file operations within that VM. (CVE-2025-22247)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-06-20T00:00:00Z","modified":"2026-10-29T11:58:18.090931Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-67797","title":"CVE-2025-22247 affecting package open-vm-tools for versions less than 11.3.0-4","description":"VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.","status":"published","published":"2025-05-12T11:15:49Z","modified":"2026-04-21T04:38:15.919546Z","updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"AZL-67806","title":"CVE-2025-22247 affecting package open-vm-tools for versions less than 12.3.5-2","description":"VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.","status":"published","published":"2025-05-12T11:15:49Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.994498Z"},{"id":"CLSA-2025-1751133361","title":"open-vm-tools: Fix of CVE-2025-22247","description":"- CVE-2025-22247: prevent usage of illegal characters in user names and file paths","status":"published","published":"2025-06-28T17:56:06Z","modified":"2026-06-01T00:30:54.759560909Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CVE-2025-22247","description":"VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.","status":"published","published":"2025-05-12T11:15:49Z","modified":"2026-10-29T11:42:19.711478783Z","updated_at":"2026-11-02T15:44:47.009967Z"},{"id":"DLA-4165-1","title":"open-vm-tools - security update","status":"published","published":"2025-05-14T00:00:00Z","modified":"2026-03-09T01:20:17.489757Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5919-1","title":"open-vm-tools - security update","status":"published","published":"2025-05-14T00:00:00Z","modified":"2026-03-09T02:09:42.162153Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0166","title":"Updated open-vm-tools packages fix security vulnerability","description":"VMware Tools contains an insecure file handling vulnerability. A\nmalicious actor with non-administrative privileges on a guest VM may\ntamper the local files to trigger insecure file operations within that\nVM. (CVE-2025-22247)\n","status":"published","published":"2025-05-27T18:46:33Z","modified":"2026-04-16T04:43:17.394808196Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15090-1","title":"libvmtools-devel-12.5.2-1.1 on GA media","description":"These are all security issues fixed in the libvmtools-devel-12.5.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-15T00:00:00Z","modified":"2026-03-23T04:53:24.451034Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01565-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\nUpdate to 12.5.2:\n\nSecurity fixes:\n\n- CVE-2025-22247: Fixed Insecure file handling (bsc#1243106)\n\nOther fixes:\n\n- Fixed GCC 15 compile time error (bsc#1241938)\n- Fix building with containerd 1.7.25+ (bsc#1237147)\n\nFull changelog:\n\nhttps://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md\nhttps://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog\n","status":"published","published":"2025-05-29T16:00:39Z","modified":"2026-02-04T03:06:02.974266Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01658-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\nUpdate to 12.5.2:\n\nSecurity fixes:\n\n- CVE-2025-22247: Fixed Insecure file handling (bsc#1243106)\n\nOther fixes:\n\n- Fixed GCC 15 compile time error (bsc#1241938)\n- Fixed building with containerd 1.7.25+ (bsc#1237147)\n- Ensure vmtoolsd.service and vgauthd.service are set to enabled by default (bsc#1237180)\n\nFull changelog:\n\nhttps://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md\nhttps://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog\n","status":"published","published":"2025-05-22T13:34:46Z","modified":"2026-02-04T02:40:20.688454Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01778-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\nUpdate to 12.5.2:\n\nSecurity fixes:\n\n- CVE-2025-22247: Fixed Insecure file handling (bsc#1243106)\n\nOther fixes:\n\n- Fixed GCC 15 compile time error (bsc#1241938)\n- Fixed building with containerd 1.7.25+ (bsc#1237147)\n\nFull changelog:\n\nhttps://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md\nhttps://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog\n","status":"published","published":"2025-05-30T13:05:19Z","modified":"2026-02-04T03:03:39.773478Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:1565-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\nUpdate to 12.5.2:\n\nSecurity fixes:\n\n- CVE-2025-22247: Fixed Insecure file handling (bsc#1243106)\n\nOther fixes:\n\n- Fixed GCC 15 compile time error (bsc#1241938)\n- Fix building with containerd 1.7.25+ (bsc#1237147)\n\nFull changelog:\n\nhttps://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md\nhttps://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog\n","status":"published","published":"2025-05-16T11:05:10Z","modified":"2026-02-04T04:11:26.891944Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20379-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\n- Updated to 12.5.2:\n  * CVE-2025-22247: Fixed insecure file handling (bsc#1243106)\n\n- Fixed gcc15 compile time error (bsc#1241938)\n","status":"published","published":"2025-06-08T13:23:03Z","modified":"2026-03-23T04:47:13.147143Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20452-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\n- Updated to 12.5.2:\n  * CVE-2025-22247: Fixed Insecure file handling (bsc#1243106)\n","status":"published","published":"2025-06-25T08:23:04Z","modified":"2026-03-23T04:47:14.786338Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7508-1","title":"open-vm-tools vulnerability","description":"It was discovered that Open VM Tools incorrectly handled certain file\noperations. An attacker in a guest could use this issue to perform insecure\nfile operations and possibly elevate privileges in the guest.\n","status":"published","published":"2025-05-13T09:00:12Z","modified":"2026-04-22T10:58:44.412546Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7508-2","title":"open-vm-tools vulnerability","description":"USN-7508-1 fixed a vulnerability in Open VM Tools. This update provides\nthe corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS\n\nOriginal advisory details:\n\n It was discovered that Open VM Tools incorrectly handled certain\n file operations. An attacker in a guest could use this issue to\n perform insecure file operations and possibly elevate privileges\n in the guest.\n","status":"published","published":"2025-06-03T09:23:36Z","modified":"2026-06-25T13:32:30.530181454Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}