VMware

8 results · Clear filters · Feed

• Low 2.7
  CVE-2026-41709 Exploited

  ESX insufficient logging vulnerability

  VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

  VMware Cloud Foundation Telco Cloud Platform vSphere Foundation Virtualization
  Jul 30, 2026

  KEV Oct 28, 2026
• Critical 9.8
  CVE-2026-59310 Exploited · Ransomware Public exploit EPSS 62%

  vCenter directory-traversal vulnerability

  VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

  VMware Cloud Foundation Telco Cloud Platform Telco Cloud Infrastructure Virtualization
  Jul 30, 2026

  KEV Aug 18, 2026
• High 8.1
  CVE-2026-22719 Exploited EPSS 18%

  VMware Aria Operations command injection vulnerability

  VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migratio…

  VMware Telco Cloud Platform VMware Aria Operations Telco Cloud Infrastructure
  Feb 25, 2026

  KEV Mar 3, 2026
• High 7.8
  CVE-2025-41244 Exploited Public exploit EPSS 16%

  VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

  VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

  VMware VMware Aria Operations VMware Telco Cloud Platform VMware Cloud Foundation Debian Ubuntu
  Sep 29, 2025

  KEV Oct 30, 2025
• Critical 9.3
  CVE-2025-22224 Exploited

  VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds …

  VMware Workstation ESXi Telco Cloud Platform Virtualization
  Mar 4, 2025

  KEV Mar 4, 2025
• Critical 9.8
  CVE-2023-34048 Exploited EPSS 99%

  VMware vCenter Server Out-of-Bounds Write Vulnerability

  vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

  VMware VMware vCenter Server VMware Cloud Foundation (VMware vCenter Server) Virtualization
  Oct 25, 2023

  KEV Jan 22, 2024
• Low 3.9
  CVE-2023-20867 Exploited EPSS 14%

  VMware Tools Authentication Bypass Vulnerability

  A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

  VMware VMware tools open-vm-tools open-vm-tools Debian Ubuntu Alpine
  Jun 13, 2023

  KEV Jun 23, 2023
• High 8.1
  CVE-2018-6961 Exploited Public exploit EPSS 85%

  VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web …

  VMware NSX SD-WAN by VeloCloud
  Jun 11, 2018

  KEV Mar 25, 2022