All · VMware

Newest first. Every filter here is also a feed: see the subscribe box.

1. 8.1high
   CVE-2026-59347VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability

   VMware
   31 d ago 2026-10-07
2. 9.3crit
   CVE-2026-59346VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability

   VMware
   31 d ago 2026-10-07
3. 2.7low
   CVE-2026-41709ESX insufficient logging vulnerability

   KEVVMware
   3 mo ago 2026-07-30
4. 9.8crit
   CVE-2026-59309vCenter authentication-bypass vulnerability

   VMware
   3 mo ago 2026-07-30
5. 9.8crit
   CVE-2026-59310vCenter directory-traversal vulnerability

   KEV · ransomwareEPSS 2.6% chance of exploitation in 30 days, percentile 85%EPSS 2.6%VMware
   3 mo ago 2026-07-30
6. 8.0high
   CVE-2026-41724VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

   VMware
   5 mo ago 2026-06-08
7. 8.0high
   CVE-2026-41723VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

   VMware
   5 mo ago 2026-06-08
8. 8.0high
   CVE-2026-41722VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

   VMware
   5 mo ago 2026-06-08
9. 7.8high
   CVE-2026-41702TOCTOU local privilege escalation vulnerability

   VMware
   5 mo ago 2026-05-15
10. 6.2med
    CVE-2026-22721VMware Aria Operations privilege escalation vulnerability

    VMware
    8 mo ago 2026-02-25
11. 8.0high
    CVE-2026-22720VMware Aria Operations stored cross-site scripting vulnerability

    VMware
    8 mo ago 2026-02-25
12. 8.1high
    CVE-2026-22719VMware Aria Operations command injection vulnerability

    KEVEPSS 18.3% chance of exploitation in 30 days, percentile 97%EPSS 18.3%VMware
    8 mo ago 2026-02-25
13. 4.9med
    CVE-2025-41245VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    VMware
    13 mo ago 2025-09-29
14. 7.8high
    CVE-2025-41244VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    KEVEPSS 8.6% chance of exploitation in 30 days, percentile 95%EPSS 8.6%VMware
    13 mo ago 2025-09-29
15. 5.9med
    CVE-2025-22245VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation.

    VMware
    17 mo ago 2025-06-04
16. 6.9med
    CVE-2025-22244VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation.

    VMware
    17 mo ago 2025-06-04
17. 7.5high
    CVE-2025-22243VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation.

    VMware
    17 mo ago 2025-06-04
18. 7.3high
    CVE-2025-41231VMware Cloud Foundation Missing Authorisation Vulnerability

    VMware
    17 mo ago 2025-05-20
19. 8.2high
    CVE-2025-22249VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)

    VMware
    17 mo ago 2025-05-13
20. 6.1med
    CVE-2025-22247Insecure file handling vulnerability

    VMware
    17 mo ago 2025-05-12
21. 7.8high
    CVE-2025-22231VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)

    VMware
    19 mo ago 2025-04-01
22. 7.8high
    CVE-2025-22230Authentication bypass vulnerability

    VMware
    19 mo ago 2025-03-25
23. 7.1high
    CVE-2025-22226VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS.

    KEVEPSS 1.6% chance of exploitation in 30 days, percentile 76%EPSS 1.6%VMware
    20 mo ago 2025-03-04
24. 8.2high
    CVE-2025-22225VMware ESXi contains an arbitrary write vulnerability.

    KEV · ransomwareEPSS 1.0% chance of exploitation in 30 days, percentile 63%EPSS 1.0%VMware
    20 mo ago 2025-03-04
25. 9.3crit
    CVE-2025-22224VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.

    KEVEPSS 1.6% chance of exploitation in 30 days, percentile 75%EPSS 1.6%VMware
    20 mo ago 2025-03-04
26. 7.7high
    CVE-2025-22222VMware Aria Operations information disclosure vulnerability (CVE-2025-22222)

    VMware
    21 mo ago 2025-01-30
27. 5.2med
    CVE-2025-22221VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22221)

    VMware
    21 mo ago 2025-01-30
28. 4.3med
    CVE-2025-22220VMware Aria Operations for Logs broken access control vulnerability (CVE-2025-22220)

    VMware
    21 mo ago 2025-01-30
29. 6.8med
    CVE-2025-22219VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22219)

    VMware
    21 mo ago 2025-01-30
30. 8.5high
    CVE-2025-22218VMware Aria Operations for Logs information disclosure vulnerability

    VMware
    21 mo ago 2025-01-30