Broadcom released security updates to address a high-severity authentication bypass vulnerability, CVE-2025-22230, in VMware Tools for Windows.
The vulnerability allows low-privileged local attackers to escalate privileges on vulnerable VMs without user interaction.
The flaw affects VMware Tools versions 12.x.x, 11.x.x for Windows, Linux, and macOS. The company addressed the vulnerability in VMware Tools 12.5.1.
This is the latest security issue addressed by Broadcom, following the earlier release of security updates for zero-day vulnerabilities in various VMware ESX products.