VMware Zero-Day Under Attack By China-Linked Hackers Since October 2024

Broadcom has published security advisory VMSA-2025-0015, disclosing six vulnerabilities in VMware products — among them four rated High / Important — and urging users to apply patches immediately.

One of the more serious flaws is CVE-2025-41244, a local privilege escalation vulnerability (CVSS score 7.8)