Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

Broadcom finally patches dangerous VMware zero-day exploited by Chinese hackers

China.
  • Broadcom patches CVE-2025-41244, a high-severity VMware privilege escalation zero-day
  • Chinese actor UNC5174 exploited the bug using malicious binaries in paths like /tmp/httpd
  • UNC5174 previously targeted French government and commercial sectors using Ivanti CSA vulnerabilities

Broadcom has patched a high-severity vulnerability affecting its VMware Aria Operations and VMware Tools that was apparently used as a zero-day in real-world attacks.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.