Vmware released security updates to address critical security vulnerabilities (CVE-2022-31685, CVE-2022-31686, CVE-2022-31687, CVE-2022-31688, CVE-2022-31689) in VMware Workspace ONE Assist product. A malicious actor could exploit some these vulnerabilities to bypass authentication and elevate privileges to admin on affected system. The company patched them with the release of Workspace ONE Assist 22.10 (89993) for Windows customers.

More information on vulnerabilities and updates can be found in Vmware security advisory – VMSA-2022-0028.