Broadcom
Vulnerability activity for Broadcom: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 2
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 1
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 4
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 9.8CriticalAug 18, 2026Broadcom VMware vCenter Path traversal / file handlingCVE-2026-59310Affected: Broadcom VMware vCenter Server Appliance and vCenter Server for Windows. Attacker gains: Remote code execution and unauthorized access to sensitive data. Recommended action: Immediately update to the latest version of VMware vCenter Server and apply the corresponding security patches.Added to KEV Aug 18, 2026Exploited2.6% likely
- 8.1HighMar 3, 2026Broadcom VMware Aria Operations Code / command injectionCVE-2026-22719Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration.Added to KEV Mar 3, 2026Exploited18% likely
- 9.8CriticalJan 23, 2026Broadcom VMware vCenter Server Memory corruptionCVE-2024-37079VMware vCenter Server. Unauthorized access to sensitive data and system compromise. Update to the latest version of VMware vCenter Server.Added to KEV Jan 23, 2026Exploited22% likely
- 7.8HighOct 30, 2025Broadcom VMware Aria Operations and VMware Tools Privilege escalationCVE-2025-41244Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.Added to KEV Oct 30, 2025Exploited8.6% likely
- 8.6HighApr 24, 2025Broadcom Brocade Fabric OS Code / command injectionCVE-2025-1976Broadcom Brocade Fabric OS contains a code injection vulnerability that allows a local user with administrative privileges to execute arbitrary code with full root privileges.Added to KEV Apr 28, 2025 · 4 days after publicationExploited
Recent
- 6.8MediumOct 27, 2026Broadcom Symantec Ghost Solution SuiteCVE-2026-101034An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation.
- 9.8CriticalAug 18, 2026Broadcom VMware vCenter Path traversal / file handlingCVE-2026-59310Affected: Broadcom VMware vCenter Server Appliance and vCenter Server for Windows. Attacker gains: Remote code execution and unauthorized access to sensitive data. Recommended action: Immediately update to the latest version of VMware vCenter Server and apply the corresponding security patches.Exploited2.6% likely
- 8.1HighMar 3, 2026Broadcom VMware Aria Operations Code / command injectionCVE-2026-22719Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration.Exploited18% likely
- 9.8CriticalJan 23, 2026Broadcom VMware vCenter Server Memory corruptionCVE-2024-37079VMware vCenter Server. Unauthorized access to sensitive data and system compromise. Update to the latest version of VMware vCenter Server.Exploited22% likely
- 7.8HighOct 30, 2025Broadcom VMware Aria Operations and VMware Tools Privilege escalationCVE-2025-41244Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.Exploited8.6% likely
- 8.6HighApr 24, 2025Broadcom Brocade Fabric OS Code / command injectionCVE-2025-1976Broadcom Brocade Fabric OS contains a code injection vulnerability that allows a local user with administrative privileges to execute arbitrary code with full root privileges.Exploited
Top products
- VMware vCenter Server1 CVE in the last year, 1 critical, 1 exploited
- VMware vCenter1 CVE in the last year, 1 critical, 1 exploited
- VMware Aria Operations and VMware Tools1 CVE in the last year, 1 exploited
- VMware Aria Operations1 CVE in the last year, 1 exploited
- Symantec Ghost Solution Suite1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Oct 28, 2026VMware security advisory (AV26-763) – Update 2CVE-2026-59310
- Broadcom VMSA · Jul 29, 2026VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)CVE-2026-59310
- Broadcom VMSA · Feb 24, 2026VMSA-2026-0001: VMware Aria Operations updates address multiple vulnerabilities (CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721)CVE-2026-22719
- Broadcom VMSA · Sep 29, 2025VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)CVE-2025-41244
- Broadcom VMSA · Jun 18, 2024VMSA-2024-0012:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-37079, CVE-2024-37080, CVE-2024-37081)CVE-2024-37079
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.