Skip to content
OpenAdvisories

Vendor

VMware

241 known vulnerabilities.

Products

Workstation 51 Fusion 42 ESXi 25 Cloud Foundation 17 Telco Cloud Platform 17 VMware Aria Operations 15 VMware ESXi 14 Telco Cloud Infrastructure 14 Workstation Pro/Player 12 SALT 11 Horizon View Client for Windows 9 VMware Telco Cloud Platform 8 Avi Load Balancer 8 Spring Framework 7 VMware Workstation 7 VMware Fusion 7 vSphere Foundation 7 vCenter Server 6 VMware vCenter Server (vCenter Server) 5 VMware Cloud Foundation (vCenter Server) 5 Fusion Pro / Fusion 5 VMware Cloud Foundation 5 Spring AI 5 VMware tools 4 VMware Telco Cloud Infrastructure 4 VMware Aria Operations for Logs 4 VMware vCenter Server 4 vCenter 4 VCF operations 4 Vmware Aria Automation 3 VMware NSX 3 Airwatch Console 3 vRealize Automation 3 Workstation and Fusion 3 vRealize Operations for Horizon Adapter 3 VMware ESXi, Workstation, and Fusion 3 ESX 3 NSX 2 VMware AirWatch Console (AWC) 2 VMware Avi Load Balancer 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-22722 Public exploit

    VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash

    A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix'

    VMware Workstation
  • Medium 5.9
    CVE-2025-41242 Public exploit

    CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers

    Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: * the application is deployed as a WAR or with an emb…

    VMware Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Medium 4.3
    CVE-2025-41228 Public exploit

    VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability

    VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal co…

    VMware ESXi Telco Cloud Platform Cloud Foundation Virtualization