VMware Tools for Windows update addresses vSockets information-disclosure vulnerability (CVE-2025-41239)

VMware released security advisory VMSA-2025-0013 with Medium severity affecting VMware Tools.

The fix is available in VMware Tools v12.5.3 for Windows available in the VSS-Windows Content Library as Item VMware-Tools-for-Windows-12.5.3.24819442 (see Windows section below) and Linux via open-vm-tools package or patch (see Linux section below).

How-To Remediate

Windows

ITS Private Cloud CLI

1. Mount the VMware Tools ISO VMware-Tools-for-Windows-12.5.3.24819442 with the vss-cli:

   vss-cli compute vm set <id> cd up --backing VMware-Tools-for-Windows-12.5.3.24819442 1

2. Proceed with the installation in the OS.

ITS Private Cloud Portal

1. Login to the https://cloud-portal.eis.utoronto.ca

2. Look for your VM and click on the Edit button.

3. Mount the VMWare Tools ISO VMware-Tools-for-Windows-12.5.3.24819442

4. Proceed with the installation in the OS.