https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T13:11:04.746038+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-41244 CVE-2025-41244 — VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-20… 2026-09-28T13:11:04.748828+00:00

Affected: VMware VCF operations, VMware tools, VMware Aria Operations, VMware Cloud Foundation, VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

 https://vulnerability.circl.lu/vuln/usn-7785-1 USN-7785-1 — open-vm-tools vulnerability 2026-09-28T13:11:04.748943+00:00

Affected: Ubuntu:Pro:20.04:LTS: open-vm-tools, Ubuntu:22.04:LTS: open-vm-tools, Ubuntu:24.04:LTS: open-vm-tools

It was discovered that Open VM Tools incorrectly handled permissions with version checking. An attacker could possibly use this issue to escalate privileges inside a virtual machine.

This update disables the SDMP get-versions.sh script, so version information may no longer be made available.