CVE-2025-22230

Summary

CVE-2025-22230 is a vulnerability affecting VMware Tools for Windows. This issue allows a non-administrative user on a guest VM to bypass authentication and execute high privilege operations within the VM. The flaw arises from insufficient access controls implemented in VMware Tools, making it a significant security concern. Malicious actors can potentially exploit this vulnerability to gain unauthorized access and perform actions that normally require administrative privileges. It is recommended that users update to the latest version of VMware Tools to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.