Skip to content
OpenAdvisories

Vendor

VMware

241 known vulnerabilities.

Products

Workstation 51 Fusion 42 ESXi 25 Cloud Foundation 17 Telco Cloud Platform 17 VMware Aria Operations 15 VMware ESXi 14 Telco Cloud Infrastructure 14 Workstation Pro/Player 12 SALT 11 Horizon View Client for Windows 9 VMware Telco Cloud Platform 8 Avi Load Balancer 8 Spring Framework 7 VMware Workstation 7 VMware Fusion 7 vSphere Foundation 7 vCenter Server 6 VMware vCenter Server (vCenter Server) 5 VMware Cloud Foundation (vCenter Server) 5 Fusion Pro / Fusion 5 VMware Cloud Foundation 5 Spring AI 5 VMware tools 4 VMware Telco Cloud Infrastructure 4 VMware Aria Operations for Logs 4 VMware vCenter Server 4 vCenter 4 VCF operations 4 Vmware Aria Automation 3 VMware NSX 3 Airwatch Console 3 vRealize Automation 3 Workstation and Fusion 3 vRealize Operations for Horizon Adapter 3 VMware ESXi, Workstation, and Fusion 3 ESX 3 NSX 2 VMware AirWatch Console (AWC) 2 VMware Avi Load Balancer 2
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-59346 Public exploit

    VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability

    VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Affected versions: - …

    VMware VMware Workstation VMware Fusion
  • Critical 9.8
    CVE-2026-59310 Exploited · Ransomware Public exploit EPSS 62%

    vCenter directory-traversal vulnerability

    VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

    VMware Cloud Foundation Telco Cloud Platform Telco Cloud Infrastructure Virtualization
    KEV Aug 18, 2026
  • Critical 9.1
    CVE-2026-22732 Public exploit

    Under Some Conditions Spring Security HTTP Headers Are not Written

    When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.  This issue affects Spring Security Servlet applications using lazy (default) writing of HTTP H…

    VMware Spring Security org.springframework.security:spring-security-web Maven
  • High 8.8
    CVE-2026-22730 Public exploit

    CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter

    A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands. The vulnerability exists due to missing input sanitization.

    VMware Spring AI org.springframework.ai:spring-ai-mariadb-store Maven
  • Medium 6.1
    CVE-2026-22722 Public exploit

    VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash

    A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix'

    VMware Workstation
  • High 7.8
    CVE-2025-41244 Exploited Public exploit EPSS 16%

    VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

    VMware VMware Aria Operations VMware Telco Cloud Platform VMware Cloud Foundation Debian Ubuntu
    KEV Oct 30, 2025
  • High 7.5
    CVE-2025-41249 Public exploit

    CVE-2025-41249: Spring Framework Annotation Detection Vulnerability

    The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions…

    VMware Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Medium 5.9
    CVE-2025-41242 Public exploit

    CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers

    Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: * the application is deployed as a WAR or with an emb…

    VMware Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Medium 4.3
    CVE-2025-41228 Public exploit

    VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability

    VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal co…

    VMware ESXi Cloud Foundation Telco Cloud Platform Virtualization
  • Low 3.1
    CVE-2024-38820 Public exploit

    CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception

    The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

    VMware Spring libspring-java libspring-java Debian Ubuntu Maven
  • Unscored —
    CVE-2018-6981 Public exploit

    VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without …

    VMware VMware ESXi, VMware Workstation, and VMware Fusion Virtualization
  • High 8.1
    CVE-2018-6961 Exploited Public exploit EPSS 85%

    VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web …

    VMware NSX SD-WAN by VeloCloud
    KEV Mar 25, 2022
  • Unscored —
    CVE-2017-4901 Public exploit EPSS 20%

    The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 h…

    VMware Workstation Pro/Player Fusion Pro / Fusion
  • Unscored —
    CVE-2017-4905 Public exploit

    VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESX…

    VMware ESXi Workstation Pro/Player Fusion Pro / Fusion Virtualization
  • Unscored —
    CVE-2017-4914 Public exploit

    VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of t…

    VMware vSphere Data Protection (VDP) Virtualization
  • Unscored —
    CVE-2017-4916 Public exploit

    VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Succe…

    VMware Workstation Pro/Player
  • Unscored —
    CVE-2017-4915 Public exploit

    VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration fi…

    VMware Workstation Pro/Player