Broadcom Finally Patches Dangerous VMware Zero-Day Exploited by Chinese Hackers

Broadcom finally patches dangerous VMware zero-day exploited by Chinese hackers

A bug abused since late 2024 has now finally been addressed.

Chinese hackers exploiting VMware zero-day since October 2024

Broadcom has patched a high-severity privilege escalation vulnerability in its VMware Aria Operations and VMware Tools software, which has been exploited in zero-day attacks since October 2024.

Chinese cyber threat exploited VMware vulnerability for a full year

The Chinese group UNC5174 was already exploiting VMware Tools and Aria Operations in October 2024, but was it intentional?

VMware Vulnerability CVE-2025-41244 Exploited For A Year

A newly listed VMware zero-day vulnerability has been actively exploited by Chinese state-sponsored threat actors for almost a year, according to security researchers. The vulnerability, CVE-2025-41244, was reported to VMware parent Broadcom by NVISO researchers, who published a blog on September 29 detailing the in-the-wild exploitation. Broadcom also addressed the vulnerability in an advisory published the same day. The 7.8-rated local privile…

China-Linked Hackers Exploit New VMware Zero-Day Since October 2024 - Cybernoz - Cybersecurity News

Sep 30, 2025Ravie LakshmananZero-Day / Vulnerability A newly patched security flaw impacting Broadcom VMware Tools and VMware Aria Operations has been exploited in the wild as a zero-day since mid-October 2024 by a threat actor called UNC5174, according to NVISO Labs. The vulnerability in question is CVE-2025-41244 (CVSS score: 7.8), a local privilege escalation bug affecting the following versions – VMware Cloud Foundation 4.x and 5.x VMwar…

Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024

A newly patched security flaw impacting Broadcom VMware Tools and VMware Aria Operations has been exploited in the wild as a zero-day since mid-October 2024 by a threat actor called UNC5174, according to NVISO Labs. The vulnerability in question is CVE-2025-41244 (CVSS score: 7.8), a local privilege escalation bug affecting the following versions VMware Cloud Foundation 4.x and 5.x VMware