Information security
fromSecurityWeek
1 day agoBroadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability
CVE-2025-41244 enables privilege escalation to root on VMs with VMware Tools and Aria Operations (SDMP enabled) and has been exploited since October 2024.