VMware Patches Authentication Bypass Flaw in Windows Tool

On Tuesday, VMware issued an urgent fix for a security flaw in its VMware Tools for Windows. CVE-2025-22230 allows a malicious user with basic access on a Windows guest virtual machine to execute high-privilege tasks within that VM.

VMware’s important bulletin states that an authentication bypass bug, due to improper access control, has a CVSS severity score of 7.8/10.

• Hot Topic

German police read Signal, Telegram, WhatsApp messages without breaking encryption

By infosecbulletin / Saturday , September 12 2026

German law enforcement agencies are using features built into apps such as WhatsApp to monitor people’s messages without breaking their...

Read More

• Alert

Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft

By infosecbulletin / Friday , September 11 2026

GitLab has released an important security update to fix two serious problems. These issues could allow unauthorized file access and...

Read More

• Alert

Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution

By infosecbulletin / Thursday , September 10 2026

Palo Alto Networks has revealed a serious flaw in PAN-OS. It may let a remote attacker without a password run...

Read More

• Vulnerabilities

Critical Check Point VPN flaws allow remote code execution attacks

By infosecbulletin / Thursday , September 10 2026

Check Point Software has revealed and fixed two major VPN flaws, CVE-2026-85102 and CVE-2026-85103. Both have a top CVSS score...

Read More

• Alert

Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks

By infosecbulletin / Thursday , September 10 2026

Cisco has said that a serious security flaw CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being used...

Read More

• Cyber Attack

Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally

By infosecbulletin / Thursday , September 10 2026

A Russian-speaking hacker has used artificial intelligence like never before. They sent out hundreds of AI agents to find and...

Read More

• Hot Topic

CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models

By infosecbulletin / Thursday , September 10 2026

Six Chinese AI companies ran large-scale attacks on American AI models since late 2024, according to U.S. cybersecurity and intelligence...

Read More

• Hot Topic

Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day

By infosecbulletin / Wednesday , September 9 2026

An unknown security expert called Nightmare Eclipse has drops a new Microsoft Defender flaw called "ShieldCrash" right after Microsoft released...

Read More

• Alert

cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root

By infosecbulletin / Wednesday , September 9 2026

cPanel has shared CVE-2026-67401, a serious SQL injection flaw in EmailTrack. This flaw could allow attackers with permission to take...

Read More

• Alert

FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited

By infosecbulletin / Wednesday , September 9 2026

An ongoing attack is focused on FortiGate firewalls. Hackers use a serious flaw to install a special Node.js remote access...

Read More

The company acknowledged a researcher from Positive Technologies, a Russian cybersecurity firm, for discovering the bug and stated that patches have been added to VMware Tools for Windows v 12.5.1.

The Linux and macOS versions of the utilities are not affected.

VMware Tools for Windows is a set of utilities and drivers that improves virtual machine performance and management, offering enhanced graphics, better mouse integration, and time synchronization between the host and guest operating systems.

Over 40% of cloud environments are vulnerable to RCE