CVE-2022-31676

28

FAUCET Score

CVE-2022-31676 is a local privilege escalation vulnerability in VMware Tools, affecting versions 12.0.0, 11.x.y, and 10.x.y across various operating systems including Debian, Fedora, Linux, and Microsoft. This flaw allows a non-administrative local user within a guest OS to gain root privileges in the virtual machine. It carries a high CVSS score of 7.8 due to its low attack complexity and significant impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 10.0.0, < 12.1.0CPE matchmatch criteria	cpe:2.3:a:vmware:tools::::::::
		>= 10.0.0, < 10.3.25CPE matchmatch criteria	cpe:2.3:a:vmware:tools::::::::
		>= 11.0.0, < 12.1.0CPE matchmatch criteria	cpe:2.3:a:vmware:tools::::::::
		10.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:10.0:::::::*
		11.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:11.0:::::::*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.54%

Probability of exploitation in next 30 days

EPSS Percentile

42.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0054 is in the 82nd percentile among its peer group of 17,061 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: open-vm-tools-0:10.3.10-3.el8_1.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: open-vm-tools-0:11.0.5-3.el7_9.4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: open-vm-tools-0:11.3.5-1.el8_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: open-vm-tools-0:11.3.5-1.el9_0.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Extended Update SupportFixed in: open-vm-tools-0:11.0.0-4.el8_2.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Extended Update SupportFixed in: open-vm-tools-0:11.2.0-2.el8_4.1

vmwarevendor investigatingvia nvd_reference

Vendor Advisories (1)

redhatCVE-2022-31676Important

open-vm-tools: local root privilege escalation in the virtual machine

References

lists.debian.org / debian-lts-announce/2022/08/msg00013.html

Mailing ListThird Party Advisory

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/C5VV2R4LV4T3SNQJYRLFD4C75HBDVV76

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/O4TZF6QRJIDECGMEGBPXJCHZ6YC3VZ6Z

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/ZA63DWRW7HROTVBNRIPBJQWBYIYAQMEW

security.gentoo.org / glsa/202210-27

Third Party Advisory

security.netapp.com / advisory/ntap-20221017-0003

Third Party Advisory

debian.org / security/2022/dsa-5215

Third Party Advisory

vmware.com / security/advisories/VMSA-2022-0024.html

Release NotesVendor Advisory

openwall.com / lists/oss-security/2022/08/23/3

Mailing ListPatchRelease NotesThird Party Advisory