Open Vm Tools
Vendor:
First CVE: Apr 10, 2011 · Active for 15 years
7
Total CVEs
More Total CVEs than 83% of tracked products
1.8
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 34% of tracked products
14.3%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Open Vm Tools over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 10, 2011
15 years ago
Most Recent CVE
Sep 29, 2025
298 days ago
CVE Severity & Scoring
Open Vm Tools7 CVEs
14%
14%
71%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local4 (57.1%)
Network0 (0.0%)
Unknown1 (14.3%)
Physical0 (0.0%)
Adjacent Network2 (28.6%)
Attack Complexity
Low2 (28.6%)
High4 (57.1%)
Unknown1 (14.3%)
User Interaction
None6 (85.7%)
Unknown1 (14.3%)
Required0 (0.0%)
Privileges Required
Low3 (42.9%)
High1 (14.3%)
None2 (28.6%)
Unknown1 (14.3%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-41244HIGH VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VM | Sep 29, 2025 | 7.8 | 73 | YES | NO |
CVE-2023-34058HIGH VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0 | Oct 27, 2023 | 7.5 | 25 | NO | NO |
CVE-2023-20900HIGH A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html i | Aug 31, 2023 | 7.5 | 25 | NO | NO |
CVE-2009-1143HIGH An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath ra | Nov 23, 2022 | 7.0 | 24 | NO | NO |
CVE-2009-1142MEDIUM An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the Ch | Nov 23, 2022 | 6.7 | 23 | NO | NO |
CVE-2023-34059HIGH open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the
/dev/uinput fil | Oct 27, 2023 | 7.0 | 21 | NO | NO |
vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resourc | Apr 10, 2011 | 3.3 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
1 CVE
14.3% of CVEs· 98th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Open Vm Tools
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2009.03.18-154848 | 2 | 6.8 | 0.3% | 0 | 0 |
| 13.0.0 | 1 | 7.8 | 7.9% | 1 | 0 |