VYPR
← All advisories
High severity7.1NVD Advisory· Published May 24, 2022· Updated Jun 17, 2026

CVE-2022-22977

CVE-2022-22977

Description

VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or unintended information disclosure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • VMware/Tools
    cpe:2.3:a:vmware:tools:*:*:*:*:*:*:*:*
    Range: >=10.0.0,<=10.3.24
  • VMware/Tools for Windowscpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 12.0.0, 11.x.y and 10.x.y

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.