[ Vendor · 38 CVEs ]
VMware
CVEs affecting VMware published in the last 30 days, plus any VMware CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-59346 | 7 Oct 2026 | CVSS 9.3 | VMware WorkstationVMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine… | |
| CVE-2026-59347 | 7 Oct 2026 | CVSS 8.1 | VMware WorkstationVMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on… | |
| CVE-2026-59310 | 30 Jul 2026 | CVSS 9.8 | Broadcom VMware vCenter Path TraversalVMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this… | Exploited |
| CVE-2026-22719 | 25 Feb 2026 | CVSS 8.1 | Broadcom VMware Aria Operations Command InjectionVMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary… | ExploitedFix |
| CVE-2025-41244 | 29 Sep 2025 | CVSS 7.8 | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe ActionsVMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative… | Exploited |
| CVE-2025-22224 | 4 Mar 2025 | CVSS 8.2 | VMware ESXi and Workstation TOCTOU Race ConditionVMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with… | Exploited |
| CVE-2025-22225 | 4 Mar 2025 | CVSS 8.2 | VMware ESXi Arbitrary WriteVMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write… | Exploited |
| CVE-2025-22226 | 4 Mar 2025 | CVSS 6.0 | VMware ESXi, Workstation, and Fusion Information DisclosureVMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with… | Exploited |
| CVE-2024-38813 | 17 Sep 2024 | CVSS 9.8 | VMware vCenter Server Privilege EscalationThe vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this… | Exploited |
| CVE-2024-38812 | 17 Sep 2024 | CVSS 9.8 | VMware vCenter Server Heap-Based Buffer OverflowThe vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to… | Exploited |
| CVE-2024-37085 | 25 Jun 2024 | CVSS 7.2 | VMware ESXi Authentication BypassVMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access… | ExploitedFix |
| CVE-2024-37085 | 25 Jun 2024 | CVSS 7.2 | VMware ESXi Authentication BypassVMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access… | ExploitedFix |
| CVE-2023-34048 | 25 Oct 2023 | CVSS 9.8 | VMware vCenter Server Out-of-Bounds WritevCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to… | Exploited |
| CVE-2023-34048 | 25 Oct 2023 | CVSS 9.8 | VMware vCenter Server Out-of-Bounds WritevCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to… | Exploited |
| CVE-2023-20867 | 13 Jun 2023 | CVSS 3.9 | VMware Tools Authentication BypassA fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of… | ExploitedFix |
| CVE-2023-20887 | 7 Jun 2023 | CVSS 9.8 | Vmware Aria Operations for Networks Command InjectionAria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks… | ExploitedFix |
| CVE-2023-29552 | 25 Apr 2023 | CVSS 7.5 | Service Location Protocol (SLP) Denial-of-ServiceThe Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the… | Exploited |
| CVE-2022-22960 | 13 Apr 2022 | CVSS 7.8 | VMware Multiple Products Privilege EscalationVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in… | ExploitedFix |
| CVE-2022-22954 | 11 Apr 2022 | CVSS 9.8 | VMware Workspace ONE Access and Identity Manager Server-Side Template InjectionVMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious… | Exploited |
| CVE-2022-22965 | 1 Apr 2022 | CVSS 9.8 | Spring Framework JDK 9+ Remote Code ExecutionA Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit… | ExploitedFix |
| CVE-2022-22948 | 29 Mar 2022 | CVSS 6.5 | VMware vCenter Server Incorrect Default File PermissionsThe vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative… | ExploitedFix |
| CVE-2022-22948 | 29 Mar 2022 | CVSS 6.5 | VMware vCenter Server Incorrect Default File PermissionsThe vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative… | ExploitedFix |
| CVE-2022-22947 | 3 Mar 2022 | CVSS 10.0 | VMware Spring Cloud Gateway Code InjectionIn spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator… | ExploitedFix |
| CVE-2021-22017 | 23 Sep 2021 | CVSS 5.3 | VMware vCenter Server Improper Access ControlRhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network… | ExploitedFix |
| CVE-2021-22005 | 23 Sep 2021 | CVSS 9.8 | VMware vCenter Server File UploadThe vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on… | ExploitedFix |
| CVE-2021-21985 | 26 May 2021 | CVSS 9.8 | VMware vCenter Server Improper Input ValidationThe vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in… | Exploited |
| CVE-2021-21975 | 31 Mar 2021 | CVSS 7.5 | VMware Server Side Request Forgery in vRealize Operations Manager APIServer Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the… | Exploited |
| CVE-2021-21972 | 24 Feb 2021 | CVSS 9.8 | VMware vCenter Server Remote Code ExecutionThe vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port… | Exploited |
| CVE-2021-21973 | 24 Feb 2021 | CVSS 5.3 | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF)The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server… | Exploited |
| CVE-2020-4006 | 23 Nov 2020 | CVSS 9.1 | Multiple VMware Products Command InjectionVMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability. | Exploited |
| CVE-2020-3992 | 20 Oct 2020 | CVSS 9.8 | VMware ESXi OpenSLP Use-After-FreeOpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a… | ExploitedFix |
| CVE-2020-11651 | 30 Apr 2020 | CVSS 9.8 | SaltStack Salt Authentication BypassAn issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate… | Exploited |
| CVE-2020-11652 | 30 Apr 2020 | CVSS 6.5 | SaltStack Salt Path TraversalAn issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some… | Exploited |
| CVE-2020-3952 | 10 Apr 2020 | CVSS 9.8 | VMware vCenter Server Information DisclosureUnder certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does… | Exploited |
| CVE-2020-3950 | 17 Mar 2020 | CVSS 7.8 | VMware Multiple Products Privilege EscalationVMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before… | Exploited |
| CVE-2019-5544 | 6 Dec 2019 | CVSS 9.8 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer OverflowOpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the… | ExploitedFix |
| CVE-2018-6961 | 11 Jun 2018 | CVSS 8.1 | VMware SD-WAN Edge by VeloCloud Command InjectionVMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component… | Exploited |
| CVE-2010-3904 | 6 Dec 2010 | CVSS 7.8 | Linux Kernel Improper Input ValidationThe rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36… | ExploitedFix |