[ Vendor · 8 CVEs ]
Broadcom
CVEs affecting Broadcom published in the last 30 days, plus any Broadcom CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-19810 | 13 Oct 2026 | CVSS 5.4 | Broadcom Symantec Endpoint Detection and ResponseSymantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a… | Fix |
| CVE-2026-59310 | 30 Jul 2026 | CVSS 9.8 | Broadcom VMware vCenter Path TraversalVMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this… | Exploited |
| CVE-2026-22719 | 25 Feb 2026 | CVSS 8.1 | Broadcom VMware Aria Operations Command InjectionVMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary… | ExploitedFix |
| CVE-2025-41244 | 29 Sep 2025 | CVSS 7.8 | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe ActionsVMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative… | Exploited |
| CVE-2025-1976 | 24 Apr 2025 | CVSS 6.7 | Broadcom Brocade Fabric OS Code InjectionBrocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary… | Exploited |
| CVE-2024-38813 | 17 Sep 2024 | CVSS 9.8 | VMware vCenter Server Privilege EscalationThe vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this… | Exploited |
| CVE-2024-38812 | 17 Sep 2024 | CVSS 9.8 | VMware vCenter Server Heap-Based Buffer OverflowThe vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to… | Exploited |
| CVE-2024-37079 | 18 Jun 2024 | CVSS 9.8 | Broadcom VMware vCenter Server Out-of-bounds WritevCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter… | ExploitedFix |