Vulnerabilities > Vmware > Tools > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-06-07 CVE-2022-31693 Unspecified vulnerability in VMWare Tools
VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the VM3DMP driver.
local
low complexity
vmware
5.5
2022-11-29 CVE-2021-31693 Unspecified vulnerability in VMWare Tools
The 10Web Photo Gallery plugin through 1.5.68 for WordPress allows XSS via album_gallery_id_0, bwg_album_search_0, and type_0 for bwg_frontend_data.
local
low complexity
vmware
6.5
2022-03-03 CVE-2022-22943 Uncontrolled Search Path Element vulnerability in VMWare Tools
VMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path vulnerability.
local
low complexity
vmware CWE-427
6.7
2021-06-18 CVE-2021-21997 Unspecified vulnerability in VMWare Tools
VMware Tools for Windows (11.x.y prior to 11.3.0) contains a denial-of-service vulnerability in the VM3DMP driver.
local
low complexity
vmware
5.5
2017-07-28 CVE-2015-5191 Race Condition vulnerability in VMWare Tools
VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp.
local
high complexity
vmware CWE-362
6.7
2016-12-29 CVE-2016-5328 7PK - Security Features vulnerability in VMWare Tools
VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.
local
low complexity
vmware CWE-254
5.5