NetSight
IP …
high7.8

CVE-2022-31676

VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability.

Impact

VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.

Affected products

VendorProductAffected versions
VmwareTools
from 10.0.0 before 12.1.0
from 10.0.0 before 10.3.25
from 11.0.0 before 12.1.0
DebianDebian Linux
Versions 10.0, 11.0
FedoraprojectFedora
Versions 36, 37
NetappOntap Select Deploy Administration Utility
All versions

Weakness classification

CWE-269

References