CISA has ordered federal agencies to patch a high-severity vulnerability in Broadcom's VMware Aria Operations and VMware ...
CISA added CVE-2025-41244 to KEV, mandating patching by November 20 The bug enables local privilege escalation via VMware Tools with SDMP enabled Chinese group UNC5174 exploited it for espionage ...