Information security
fromSecurityWeek
3 weeks agoBroadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability
CVE-2025-41244 enables privilege escalation to root on VMs with VMware Tools and Aria Operations (SDMP enabled) and has been exploited since October 2024.