VMware

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

• 2.7LowJul 30, 2026VMware Cloud FoundationCVE-2026-41709VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.Added to KEV Oct 28, 2026 · 89 days after publicationExploited
• 9.3CriticalMar 4, 2025VMware ESXi and WorkstationCVE-2025-22224Affected: VMware ESXi and Workstation. Attacker gains: Arbitrary code execution, leading to potential data theft or system compromise. Recommended action: Apply VMware patches or updates as soon as possible, and ensure all virtual machines are properly configured and isolated to prevent potential exploitation.Added to KEV Mar 4, 2025 · same day as publicationExploited1.6% likely
• 8.2HighMar 4, 2025VMware ESXi Memory corruptionCVE-2025-22225Affected: VMware ESXi servers with affected versions (7.0, 7.0U1, 7.0U2, 7.0U3, 7.0U3d). Attacker gains: Arbitrary code execution and write access to sensitive data. Recommended action: Immediately update to the latest patched version of VMware ESXi (7.0U4 or later) or apply the relevant security patches to mitigate the vulnerability.Added to KEV Mar 4, 2025 · same day as publicationExploited1% likely
• 7.1HighMar 4, 2025VMware ESXi, Workstation, and Fusion Memory corruptionCVE-2025-22226VMware ESXi, Workstation, and Fusion. An attacker gains sensitive information about the affected system. Update to the latest version of VMware ESXi, Workstation, and Fusion.Added to KEV Mar 4, 2025 · same day as publicationExploited1.8% likely
• 9.8CriticalSep 17, 2024VMware vCenter Server Memory corruptionCVE-2024-38812(1) VMware vCenter Server (2) Arbitrary code execution (3) Patch vCenter Server to version 7.0U3d or later.Added to KEV Nov 20, 2024 · 63 days after publicationExploited55% likely
• 7.5HighSep 17, 2024VMware vCenter Server Privilege escalationCVE-2024-38813(1) VMware vCenter Server, allowing an attacker to escalate privileges. (2) An attacker gains elevated privileges on the system, potentially leading to unauthorized access and data manipulation. (3) Apply the latest patches and updates for VMware vCenter Server to prevent exploitation.Added to KEV Nov 20, 2024 · 63 days after publicationExploited17% likely
• 6.8MediumJun 25, 2024VMware ESXi Auth bypass / access controlCVE-2024-370851. VMware ESXi and ESXi Embedded Host Client Plug-in for Windows are affected. 2. An attacker gains ability to bypass authentication and potentially gain access to sensitive data. 3. Apply patch ESXi670-202304101-SG or later version to mitigate the vulnerability.Added to KEV Jul 30, 2024 · 34 days after publicationExploited27% likelyDetection
• 6.5MediumMar 29, 2022VMware vCenter Server Privilege escalationCVE-2022-22948VMware vCenter Server and vCenter Server Appliance are affected. An attacker gains the ability to read sensitive information and execute arbitrary code with elevated privileges. Patch VMware vCenter Server and vCenter Server Appliance to version 7.0 Update 3c or later, or version 7.0.1 or later.Added to KEV Jul 17, 2024 · 840 days after publicationExploited13% likelyExploit codeMetasploit
• 9.8CriticalOct 25, 2023VMware vCenter Server Memory corruptionCVE-2023-34048Affected: VMware vCenter Server. Attacker gains: Arbitrary code execution. Recommended action: Update to the latest version of VMware vCenter Server.Added to KEV Jan 22, 2024 · 89 days after publicationExploited99% likelyExploit codeNucleiDetection
• 3.9LowJun 13, 2023VMware Tools Auth bypass / access controlCVE-2023-20867VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.Added to KEV Jun 23, 2023 · 9 days after publicationExploited14% likely
• 9.8CriticalJun 7, 2023VMware Aria Operations for Networks Code / command injectionCVE-2023-20887VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.Added to KEV Jun 22, 2023 · 14 days after publicationExploited98% likelyExploit codeMetasploit · NucleiDetection
• 10.0CriticalMar 3, 2022VMware Spring Cloud Gateway Code / command injectionCVE-2022-22947Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.Added to KEV May 16, 2022 · 74 days after publicationExploited98% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
• 7.8HighApr 13, 2022VMware Multiple Products Privilege escalationCVE-2022-22960VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.Added to KEV Apr 15, 2022 · 2 days after publicationExploited36% likelyExploit codeMetasploit
• 9.8CriticalApr 11, 2022VMware Workspace ONE Access and Identity Manager Code / command injectionCVE-2022-22954VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.Added to KEV Apr 14, 2022 · 2 days after publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
• 9.8CriticalApr 1, 2022VMware Spring Framework Code / command injectionCVE-2022-22965Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.Added to KEV Apr 4, 2022 · 2 days after publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
• 8.1HighJun 11, 2018VMware SD-WAN Edge Code / command injectionCVE-2018-6961VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.Added to KEV Mar 25, 2022 · 1,382 days after publicationExploited85% likelyExploit codeExploit-DB · NucleiDetection
• 5.3MediumFeb 24, 2021VMware vCenter Server and Cloud Foundation SSRFCVE-2021-21973VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.Added to KEV Mar 7, 2022 · 375 days after publicationExploited88% likelyExploit codeNucleiDetection
• 9.8CriticalMar 31, 2021VMware vRealize Operations Manager API SSRFCVE-2021-21975Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.Added to KEV Jan 18, 2022 · 292 days after publicationExploited78% likelyExploit codeMetasploit · NucleiDetection
• 5.3MediumSep 23, 2021VMware vCenter Server Path traversal / file handlingCVE-2021-22017Affected: VMware vCenter Server, including vCenter Server Appliance and vCenter Server for Windows. Attacker gains: Unauthorized access to sensitive data, including vCenter Server configuration and virtual machine information. Recommended action: Update to the latest version of VMware vCenter Server, apply patches, and restrict access to the vCenter Server management interface.Added to KEV Jan 10, 2022 · 108 days after publicationExploited49% likelyExploit codeNucleiDetection
• 9.1CriticalNov 23, 2020VMware Multiple Products Code / command injectionCVE-2020-4006VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute commands with unrestricted privileges on the underlying operating system.Added to KEV Nov 3, 2021 · 344 days after publicationExploited17% likely
• 9.8CriticalMay 26, 2021VMware vCenter ServerCVE-2021-21985VMware vCenter Server and VMware vCenter Server Appliance are affected. An attacker gains unauthorized access to sensitive data and the ability to execute arbitrary code on the affected system. Update to a fixed version of VMware vCenter Server and apply additional security patches as recommended by VMware.Added to KEV Nov 3, 2021 · 160 days after publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
• 9.8CriticalFeb 24, 2021VMware vCenter Server Path traversal / file handlingCVE-2021-21972(1) VMware vCenter Server, specifically versions 7.0, 7.0.1, and 7.0.2, are affected. (2) An attacker gains remote code execution, potentially leading to a complete compromise of the affected system. (3) Apply the latest patches or upgrade to a non-vulnerable version of VMware vCenter Server.Added to KEV Nov 3, 2021 · 251 days after publicationExploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
• 9.8CriticalApr 10, 2020VMware vCenter Server Auth bypass / access controlCVE-2020-3952VMware vCenter Server. An attacker gains unauthorized access to sensitive information. Patch to the latest version of vCenter Server immediately.Added to KEV Nov 3, 2021 · 571 days after publicationExploited90% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
• 9.8CriticalSep 23, 2021VMware vCenter Server Path traversal / file handlingCVE-2021-22005vCenter Server, Unauthorized access to sensitive data, Patch vCenter Server to the latest version or restrict file upload functionality.Added to KEV Nov 3, 2021 · 41 days after publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
• 7.8HighMar 17, 2020VMware Multiple Products Privilege escalationCVE-2020-3950VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root.Added to KEV Nov 3, 2021 · 595 days after publicationExploited7.3% likelyExploit codeExploit-DB · Metasploit

Recent

• 2.7LowJul 30, 2026VMware Cloud FoundationCVE-2026-41709VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.Exploited
• 8.1HighOct 7, 2026VMware Workstation Memory corruptionCVE-2026-59347VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware Worksta
• 9.3CriticalOct 7, 2026VMware Workstation Memory corruptionCVE-2026-59346VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Affected versions: - VMware Workstation: 25H2, 26H1 (fixed in
• 7.6HighJul 30, 2026VMware Cloud Foundation Memory corruptionCVE-2026-41703VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condition of the host process. On Workstation a
• 9.3CriticalJul 30, 2026VMware Cloud Foundation Memory corruptionCVE-2026-47876VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not a
• 9.8CriticalJul 30, 2026VMware Cloud Foundation Auth bypass / access controlCVE-2026-59309VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.
• 8.0HighJun 8, 2026VMware VCF operations XSSCVE-2026-41724VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
• 8.0HighJun 8, 2026VMware VCF operations XSSCVE-2026-41723VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
• 8.0HighJun 8, 2026VMware VCF operations XSSCVE-2026-41722VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
• 7.8HighMay 15, 2026VMware FusionCVE-2026-41702VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installe
• 5.3MediumApr 29, 2026Vmware spring framework Denial of serviceCVE-2026-22745Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application can be vulnerable when all the following are true: * the application is using Spring MVC or Spring WebFlux * the application is serving static resources from the file system * the application is running on a Windows platform When all the conditions above are met, the attacker can send malicious requests that are slow to resolve and that can
• 3.1LowApr 29, 2026Vmware spring frameworkCVE-2026-22741Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: * the application is using Spring MVC or Spring WebFlux * the application is configuring the  resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title  with caching enabled * the application adds support for encoded resources resolu
• 6.5MediumApr 29, 2026Vmware spring framework Denial of serviceCVE-2026-22740A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space. Older, unsupported versions are also affected.
• 4.2MediumApr 28, 2026Vmware spring grpcCVE-2026-40968When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent unauthenticated request on the same thread. This may allow the subsequent user to gain escalated permissions. Affected versions: Spring gRPC: 1.0.0 - 1.0.2 (fixed in 1.0.3). Older, unsupported versions are also affected.
• 7.5HighMar 27, 2026Vmware spring ai Code / command injectionCVE-2026-22744In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly into the @field:{VALUE} RediSearch TAG block without escaping characters.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.
• 7.5HighMar 27, 2026Vmware spring ai SQL injectionCVE-2026-22743Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey() embeds the key into a backtick-delimited Cypher property accessor (node.`metadata.`) after stripping only double quotes, without escaping embedded backticks.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.
• 8.6HighMar 27, 2026Vmware spring ai SSRFCVE-2026-22742Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that include user-supplied media URLs. Insufficient validation of those URLs allows an attacker to induce the server to issue HTTP requests to unintended internal or external destinations. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.
• 9.8CriticalMar 27, 2026Vmware spring ai Code / command injectionCVE-2026-22738In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. Only applications that use SimpleVectorStore and pass user-supplied input as a filter expression key are affected. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.1.1% likely
• 2.7LowFeb 27, 2026VMware Workstation Memory corruptionCVE-2026-22717Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed.
• 5.0MediumFeb 27, 2026VMware Workstation Memory corruptionCVE-2026-22716Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to terminate certain Workstation processes.
• 6.1MediumFeb 26, 2026VMware Workstation Memory corruptionCVE-2026-22722A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix'
• 5.9MediumFeb 26, 2026VMware WorkstationCVE-2026-22715VMWare Workstation and Fusion contain a logic flaw in the management of network packets.  Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's.  Resolution: To remediate CVE-2026-22715 ple
• 6.2MediumFeb 25, 2026VMware Aria Operations Privilege escalationCVE-2026-22721VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721, apply the patches listed in the 'Fixed
• 8.0HighFeb 25, 2026VMware Aria Operations XSSCVE-2026-22720VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations.  To remediate CVE-2026-22720, apply the patches listed in the 'Fixed V
• 7.5HighSep 29, 2025VMware NSX Information disclosureCVE-2025-41252Description: VMware NSX contains a username enumeration vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially leading to unauthorized access attempts. Impact: Username enumeration → facilitates unauthorized access. Attack Vector: Remote, una
• 8.1HighSep 29, 2025Vmware NSX Auth bypass / access controlCVE-2025-41251VMware NSX contains a weak password recovery mechanism vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially enabling brute-force attacks. Impact: Username enumeration → credential brute force risk. Attack Vector: Remote, unauthenticated. Sever
• 8.5HighSep 29, 2025VMware vCenter Code / command injectionCVE-2025-41250VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate the notification emails sent for scheduled tasks.
• 4.9MediumSep 29, 2025VMware Aria Operations Information disclosureCVE-2025-41245VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.
• 7.6HighSep 29, 2025VMware Tools Auth bypass / access controlCVE-2025-41246VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successf
• 7.5HighSep 16, 2025VMware Spring Framework Auth bypass / access controlCVE-2025-41249The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions. Your application may be affected by th
• 7.5HighSep 16, 2025VMware Spring Security Auth bypass / access controlCVE-2025-41248The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annotations, resulting in an authorization bypass. Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature. You are not affected by this if you are not using @EnableMethodSecurity or if you do no
• 4.4MediumJul 29, 2025VMware vCenter Denial of serviceCVE-2025-41241VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this vulnerability to create a denial-of-service condition.
• 7.1HighJul 15, 2025VMware ESXi Memory corruptionCVE-2025-41239VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to leak memory from processes com3.2% likely
• 9.3CriticalJul 15, 2025VMware ESXi Memory corruptionCVE-2025-41238VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI) controller that leads to an out of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's
• 9.3CriticalJul 15, 2025VMware Cloud Foundation Memory corruptionCVE-2025-41237VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI (Virtual Machine Communication Interface) that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX pr
• 9.3CriticalJul 15, 2025VMware ESXi Memory corruptionCVE-2025-41236VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virt2.7% likely
• 5.9MediumJun 4, 2025VMware NSX XSSCVE-2025-22245VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation.
• 6.9MediumJun 4, 2025VMware NSX XSSCVE-2025-22244VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation.
• 7.5HighJun 4, 2025VMware NSX XSSCVE-2025-22243VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation.
• 4.3MediumMay 20, 2025VMware vCenter Server XSSCVE-2025-41228VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious websites.Exploit-DB
• 5.5MediumMay 20, 2025VMware ESXi Denial of serviceCVE-2025-41227VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the host process leading to a denial-of-service
• 6.8MediumMay 20, 2025VMware ESXi Denial of serviceCVE-2025-41226VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor with guest operation privileges on a VM, who is already authenticated through vCenter Server or ESXi may trigger this issue to create a denial-of-service condition of guest VMs wit
• 8.8HighMay 20, 2025VMware vCenter Server Code / command injectionCVE-2025-41225The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script action may exploit this issue to run arbitrary commands on the vCenter Server.
• 7.3HighMay 20, 2025Vmware cloud foundation Auth bypass / access controlCVE-2025-41231VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perform certain unauthorised actions and access limited sensitive information.
• 7.5HighMay 20, 2025VMware Cloud Foundation Information disclosureCVE-2025-41230VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to gain access to sensitive information.
• 8.2HighMay 20, 2025VMware Cloud Foundation Path traversal / file handlingCVE-2025-41229VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to access certain internal services.
• 8.2HighMay 13, 2025Vmware Aria Automation XSSCVE-2025-22249VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL.
• 7.8HighApr 1, 2025VMware Aria operations Privilege escalationCVE-2025-22231VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the appliance running VMware Aria Operations.
• 7.1HighMar 4, 2025VMware ESXi, Workstation, and Fusion Memory corruptionCVE-2025-22226VMware ESXi, Workstation, and Fusion. An attacker gains sensitive information about the affected system. Update to the latest version of VMware ESXi, Workstation, and Fusion.Exploited1.8% likely
• 8.2HighMar 4, 2025VMware ESXi Memory corruptionCVE-2025-22225Affected: VMware ESXi servers with affected versions (7.0, 7.0U1, 7.0U2, 7.0U3, 7.0U3d). Attacker gains: Arbitrary code execution and write access to sensitive data. Recommended action: Immediately update to the latest patched version of VMware ESXi (7.0U4 or later) or apply the relevant security patches to mitigate the vulnerability.Exploited1% likely

See every VMware entry on the dashboard.

Top products

• Workstation4 CVEs in the last year
• spring ai4 CVEs in the last year, 1 critical
• Cloud Foundation4 CVEs in the last year, 2 critical, 1 exploited
• VCF operations3 CVEs in the last year
• spring framework3 CVEs in the last year
• VMware Workstation2 CVEs in the last year, 1 critical
• VMware Aria Operations2 CVEs in the last year
• spring grpc1 CVE in the last year
• Fusion1 CVE in the last year

Advisories

Official advisories from the last 90 days that name this vendor's CVEs.

• CCCS (Canada) · Oct 28, 2026VMware security advisory (AV26-763) – Update 2CVE-2026-41703CVE-2026-41709CVE-2026-47876CVE-2026-59309
• CISA · Oct 28, 2026CISA Adds Two Known Exploited Vulnerabilities to CatalogCVE-2026-41709
• Broadcom VMSA · Sep 3, 2026VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)CVE-2026-59346CVE-2026-59347
• EUVD exploited · Jul 30, 2026EUVD-2026-51107 · VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this…CVE-2026-41709
• Broadcom VMSA · Jul 29, 2026VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)CVE-2026-41703CVE-2026-41709CVE-2026-47876CVE-2026-59309
• Broadcom VMSA · Jun 8, 2026VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)CVE-2026-41722CVE-2026-41723CVE-2026-41724
• Broadcom VMSA · May 14, 2026VMSA-2026-0003: VMware Fusion updates address privilege escalation vulnerability (CVE-2026-41702)CVE-2026-41702
• Broadcom VMSA · Feb 26, 2026VMSA-2026-0002: VMware Workstation and Fusion updates address multiple vulnerabilities (CVE-2026-22715, CVE-2026-22716, CVE-2026-22717, CVE-2026-22722)CVE-2026-22715CVE-2026-22716CVE-2026-22717CVE-2026-22722
• Broadcom VMSA · Feb 24, 2026VMSA-2026-0001: VMware Aria Operations updates address multiple vulnerabilities (CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721)CVE-2026-22720CVE-2026-22721
• Atlassian · Feb 17, 2026Atlassian Security Bulletin February 17, 2026CVE-2025-41249
• Atlassian · Jan 20, 2026Atlassian Security Bulletin January 20, 2026CVE-2025-41249
• Atlassian · Dec 11, 2025Atlassian Security Bulletin December 11, 2025CVE-2025-41248
• Atlassian · Nov 18, 2025Atlassian Security Bulletin November 18, 2025CVE-2016-1000027
• Broadcom VMSA · Sep 29, 2025VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)CVE-2025-41245CVE-2025-41246
• Broadcom VMSA · Sep 29, 2025VMSA-2025-0016: VMware vCenter and NSX updates address multiple vulnerabilities (CVE-2025-41250, CVE-2025-41251, CVE-2025-41252)CVE-2025-41250CVE-2025-41251CVE-2025-41252