VMware vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
171 matching records
- UnknownCVE-2026-47876 is listed by GCP-2026-050.Check if you run itEPSS 0.19%Oct 14, 2026
- UnknownCVE-2026-41703 is listed by GCP-2026-050.Check if you run itEPSS 0.43%Oct 14, 2026
- High7.5ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.41%Sep 9, 2026
- Critical9.8In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched.Check if you run itEPSS 0.25%Aug 21, 2026
- Low2.7VMware cloud_foundation Insufficient LoggingPatch nowKEVEPSS 0.69%Jul 30, 2026
- Critical9.8Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)Patch nowKEVEPSS 0.61%Jul 30, 2026
- Critical9.8Broadcom VMware vCenter Path Traversal VulnerabilityPatch nowKEVEPSS 2.56%Jul 30, 2026
- Medium6.5OOM error is possible while attempting to add infinite amount of functions to Function Registry.Check if you run itEPSS 0.21%Jun 1, 2026
- Medium6.5Under infinite recursion in the routing layer, request-handling can cause OOM error.Check if you run itEPSS 0.21%Jun 1, 2026
- Medium6.5Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk.Check if you run itEPSS 0.40%May 25, 2026
- High7.0VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary.Check if you run itEPSS 0.17%May 15, 2026
- High8.8A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.Check if you run itEPSS 0.11%May 13, 2026
- High8.8A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.Check if you run itEPSS 0.10%May 13, 2026
- High8.3Out-of-bounds write for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service.Check if you run itEPSS 0.12%May 12, 2026
- Critical9.3Buffer overflow for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow an escalation of privilege.Check if you run itEPSS 0.13%May 12, 2026
- High8.3Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service.Check if you run itEPSS 0.12%May 12, 2026
- High8.2A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way.Check if you run itEPSS 0.22%May 12, 2026
- High7.5Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users.Check if you run itEPSS 0.26%May 12, 2026
- High8.6Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs.Check if you run itEPSS 0.35%May 9, 2026
- Medium4.4When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.Check if you run itEPSS 0.17%May 7, 2026
- High8.1The base directory ( ) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.Check if you run itEPSS 0.22%May 7, 2026
- Critical9.1Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module.Check if you run itEPSS 0.73%May 7, 2026
- High7.5When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from u…Check if you run itEPSS 0.43%May 7, 2026
- Medium5.3Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.Check if you run itEPSS 0.34%Apr 29, 2026
- Low3.1Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.Check if you run itEPSS 0.24%Apr 29, 2026