VMware tools need to be patched!

VMware has released a security update to address a vulnerability in Tools. A remote attacker could likely exploit the vulnerability to take control of an affected system.

VMware Tools was impacted by a local privilege escalation vulnerability. Updates are available to remediate this vulnerability in affected VMware products.

VMware Tools contains a local privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.0.

A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.

Here is a matrix with remediation:

ProductVersionRunning OnCVE IdentifierCVSSv3SeverityFixed VersionWorkaroundsAdditional Documentation
VMware Tools12.x.y, 11.x.yWindowsCVE-2022-316767.0Important 12.1.0NoneNone
VMware Tools12.x.y, 11.x.yLinuxCVE-2022-316767.0Important 12.1.0NoneNone
VMware Tools10.x.yLinuxCVE-2022-316767.0Important 10.3.25NoneNone


VMware Security Advisory:


VMware Tools 12.1.0

Downloads and Documentation:



VMware Tools 10.3.25



Mitre CVE Dictionary Links:


FIRST CVSSv3 Calculator:

CVE-2022-31676: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Please like and share to spread the knowledge in the community.


If you want to chat with me please use Twitter: @AngrySysOps

Join my  VMware Knowledge Base Group: https://bit.ly/3w54tbc

Visit my FB page: https://www.facebook.com/AngrySysOps

Subscribe to my channel: https://bit.ly/3vY16CT

Please leave the comment