
- Broadcom patches CVE-2025-41244, a high-severity VMware privilege escalation zero-day
- Chinese actor UNC5174 exploited the bug using malicious binaries in paths like /tmp/httpd
- UNC5174 previously targeted French government and commercial sectors using Ivanti CSA vulnerabilities
Broadcom has patched a high-severity vulnerability affecting its VMware Aria Operations and VMware Tools that was apparently used as a zero-day in real-world attacks.