VMware vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
63 matching records
- Low2.7VMware cloud_foundation Insufficient LoggingPatch nowKEVEPSS 0.69%Jul 30, 2026
- Critical9.8Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)Patch nowKEVEPSS 0.61%Jul 30, 2026
- Critical9.8Broadcom VMware vCenter Path Traversal VulnerabilityPatch nowKEVEPSS 2.56%Jul 30, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityPatch nowKEVEPSS 18.32%Feb 25, 2026
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityPatch nowKEVEPSS 8.63%Sep 29, 2025
- UnknownVmware vSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityPatch nowKEVJun 7, 2025
- Medium6.0VMware ESXi, Workstation, and Fusion Information Disclosure VulnerabilityPatch nowKEVEPSS 1.63%Mar 4, 2025
- High8.2VMware ESXi Arbitrary Write VulnerabilityPatch nowKEVEPSS 1.02%Mar 4, 2025
- High8.2VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityPatch nowKEVEPSS 1.56%Mar 4, 2025
- UnknownVMware ESXi Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 83.38%Feb 27, 2025
- UnknownVMware Spring Framework Unintended Proxy or Intermediary ('Confused Deputy')Patch nowKEVEPSS 10.21%Feb 25, 2025
- UnknownSpring Framework WebMvc.fn or WebFlux.fn Path Traversal VulnerabilityPatch nowKEVEPSS 21.26%Oct 22, 2024
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityPatch nowKEVEPSS 2.31%Oct 11, 2024
- UnknownVMware ESXi Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 0.50%Oct 11, 2024
- Critical9.8VMware vCenter Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 17.36%Sep 17, 2024
- Critical9.8VMware vCenter Server Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 54.57%Sep 17, 2024
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityPatch nowKEVEPSS 0.65%Sep 11, 2024
- UnknownVMware ESXi, Workstation, and Fusion XHCI USB Controller VulnerabilityPatch nowKEVEPSS 3.54%Sep 11, 2024
- UnknownVMware vrealize_operations_for_horizon Incorrect AuthorizationPatch nowKEVEPSS 0.50%Jul 25, 2024
- Critical9.8Broadcom VMware vCenter Server Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 22.38%Jun 17, 2024
- High7.2VMware ESXi Authentication Bypass VulnerabilityPatch nowKEVEPSS 26.77%Apr 23, 2024
- UnknownVMware vRealize Log Insight Information DisclosurePatch nowKEVEPSS 22.30%Dec 20, 2023
- UnknownVMware vrealize_log_insight Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 87.08%Dec 20, 2023
- UnknownVMware vRealize Remote Code ExecutionPatch nowKEVEPSS 81.01%Dec 20, 2023
- UnknownVMware view_planner Improper Input ValidationPatch nowKEVEPSS 99.00%Dec 3, 2023