https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:32:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-12442 bdu:2025-12442 https://cve.radiocsirt.org/vuln/bdu:2025-12442 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0832 certfr-2025-avi-0832 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0832 https://cve.radiocsirt.org/vuln/cnvd-2025-23106 cnvd-2025-23106 https://cve.radiocsirt.org/vuln/cnvd-2025-23106 https://cve.radiocsirt.org/vuln/euvd-2026-271947 EUVD-2026-271947 https://cve.radiocsirt.org/vuln/euvd-2026-271947 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41246 <p>VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successful exploitation requires knowledge of credentials of the targeted VMs and vCenter or ESX.</p> <p>VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successful exploitation requires knowledge of credentials of the targeted VMs and vCenter or ESX.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-41246 https://cve.radiocsirt.org/vuln/ghsa-8c4m-2wpp-9qmh <p>VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successful exploitation requires knowledge of credentials of the targeted VMs and vCenter or ESX.</p> <p>VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successful exploitation requires knowledge of credentials of the targeted VMs and vCenter or ESX.</p> https://cve.radiocsirt.org/vuln/ghsa-8c4m-2wpp-9qmh https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2153 <p>Ein Angreifer kann mehrere Schwachstellen in VMware Cloud Foundation, VMware vSphere, VMware Aria Operations und VMware Tools ausnutzen, um erweiterte Berechtigungen – sogar Administratorrechte – zu erlangen und vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in VMware Cloud Foundation, VMware vSphere, VMware Aria Operations und VMware Tools ausnutzen, um erweiterte Berechtigungen – sogar Administratorrechte – zu erlangen und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2153