Broadcom released security updates today to fix a high-severity authentication bypass vulnerability in VMware Tools for Windows.
VMware Tools is a suite of drivers and utilities designed to improve performance, graphics, and overall system integration for guest operating systems running in VMware virtual machines.
The vulnerability (
CVE-2025-22230) is caused by an improper access control weakness and was reported by Sergey Bliznyuk of Positive Technologies (a
sanctioned Russian cybersecurity company accused of trafficking hacking tools).
Local attackers with low privileges can exploit it in low-complexity attacks that don't require user interaction to gain high privileges on vulnerable VMs.
"A malicious actor with non-administrative privileges on a Windows guest VM may gain ability to perform certain high-privilege operations within that VM," VMware
explains in a security advisory published on Tuesday.
