Severity
Medium
Analysis Summary
CVE-2025-22247
VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.
Impact
- Data Manipulation
Indicators of Compromise
CVE
CVE-2025-22247
Affected Vendors
VMware
Affected Products
- VMware Tools 11.0.0 - 12.5.2
Remediation
Refer to VMware Security Advisory for patch, upgrade, or suggested workaround information.