VMware vulnerabilities
The newest vulnerabilities affecting VMware, up to 200. Subscribe by RSS.
- CVE-2026-59347VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerabilityVMware Workstation · VMware Fusion
- CVE-2026-59346VMware Workstation and Fusion VMXNET3 integer-overflow vulnerabilityVMware Workstation · VMware Fusion
- CVE-2026-59355Spring Authorization Server: Open Redirect via request_uri parameterVMware Spring Authorization Server
- CVE-2026-59354Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadataVMware by Broadcom Spring Security
- CVE-2026-41709ESX insufficient logging vulnerabilityVMware Cloud Foundation · VMware vSphere Foundation +2
- CVE-2026-41703Out-of-bounds read vulnerabilityVMware Cloud Foundation · VMware vSphere Foundation +4
- CVE-2026-47876VMXNET3 out-of-bounds write vulnerabilityVMware Cloud Foundation · VMware vSphere Foundation +2
- CVE-2026-59309vCenter authentication-bypass vulnerabilityVMware Cloud Foundation · VMware vSphere Foundation +3
- CVE-2026-59310vCenter directory-traversal vulnerabilityVMware Cloud Foundation · VMware vSphere Foundation +3
- CVE-2026-47871VMware Avi Load Balancer Directory Traversal VulnerabilityVMware Avi Load Balancer
- CVE-2026-47870VMware Avi Load Balancer Privilege Escalation VulnerabilityVMware Avi Load Balancer
- CVE-2026-47869VMware Avi Load Balancer Remote Code Execution VulnerabilityVMware Avi Load Balancer
- CVE-2026-47868VMware Avi Load Balancer Local Privilege Escalation VulnerabilityVMware Avi Load Balancer
- CVE-2026-47867VMware Avi Load Balancer Remote Code Execution VulnerabilityVMware Avi Load Balancer
- CVE-2026-47866VMware Avi Load Balancer Authorization Bypass VulnerabilityVMware Avi Load Balancer
- CVE-2026-47865VMware Avi Load Balancer Authentication Bypass VulnerabilityVMware Avi Load Balancer
- CVE-2026-59269Privilege Escalation via Active Directory LDAP injection in Pinniped Supervisor can be executed by an attacker who can edit LDAP Group DN entriesVMware Pinniped
- CVE-2026-41724VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)VMware VCF operations · VMware Aria Operations +1
- CVE-2026-41723VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)VMware VCF operations · VMware Aria Operations +1
- CVE-2026-41722VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)VMware VCF operations · VMware Aria Operations +1
- CVE-2026-41702TOCTOU local privilege escalation vulnerabilityVMware Fusion
- CVE-2026-41713Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisorVMware Spring AI · org.springframework.ai:spring-ai-client-…
- CVE-2026-41712ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakageVMware Spring AI · org.springframework.ai:spring-ai-clie… +2
- CVE-2026-22745CVE-2026-22745 : Denial of service in static resource handling on Windows platformsVMware Spring Framework · org.springframework:spring-web… +1
- CVE-2026-22741Static resource cache poisoning in Spring MVC and WebFluxVMware Spring Framework · org.springframework:spring-web… +1
- CVE-2026-22740Spring Framework DoS with Multipart Temp Files in WebFluxVMware Spring Framework · org.springframework:spring-webflux
- CVE-2026-40966VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltrationVMware Spring AI · org.springframework.ai:spring-ai-advisor…
- CVE-2026-22750SSL bundle configuration silently bypassed in Spring Cloud GatewayVMware Spring Cloud Gateway · org.springframework.cloud:spr…
- CVE-2026-22732Under Some Conditions Spring Security HTTP Headers Are not WrittenVMware Spring Security · org.springframework.security:sprin…
- CVE-2026-22729CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverterVMware Spring AI · org.springframework.ai:spring-ai-vector-…
- CVE-2026-22730CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverterVMware Spring AI · org.springframework.ai:spring-ai-mariadb…
- CVE-2026-22717VMware Workstation out-of-bound read vulnerabilityVMware Workstation
- CVE-2026-22716VMware Workstation out-of-bounds write vulnerabilityVMware Workstation
- CVE-2026-22722VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crashVMware Workstation
- CVE-2026-22715VMware Workstation/Fusion NAT vulnerabilityVMware Workstation · VMware Fusion
- CVE-2026-22721VMware Aria Operations privilege escalation vulnerabilityVMware Aria Operations · VMware Cloud Foundation +2
- CVE-2026-22720VMware Aria Operations stored cross-site scripting vulnerabilityVMware Aria Operations · VMware Cloud Foundation Operati… +2
- CVE-2026-22719VMware Aria Operations command injection vulnerabilityVMware Aria Operations · VMware Cloud Foundation Operati… +2
- CVE-2026-2818Zip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific)VMware Spring Data Geode · VMware Spring Data Gemfire
- CVE-2026-2817Spring Data Geode Insecure Temporary Directory UsageVMware Spring Data Geode · VMware Spring Data Gemfire
- CVE-2025-41254Spring Framework STOMP CSRF VulnerabilityVMware Spring Framework · org.springframework:spring-websoc…
- CVE-2025-41253Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment VariablesVMware Spring Cloud Gateway Server Webflux · org.springfram…
- CVE-2025-41252Username enumeration vulnerabilityVMware NSX
- CVE-2025-41251Weak password recovery vulnerabilityvmware NSX
- CVE-2025-41250Header injection vulnerabilityVMware vCenter · VMware Cloud Foundation +3
- CVE-2025-41245VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)VMware Aria Operations · VMware Cloud Foundation +2
- CVE-2025-41244VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)VMware VCF operations · VMware tools +4
- CVE-2025-41246Improper authorisation vulnerabilityVMware Tools
- CVE-2025-41249CVE-2025-41249: Spring Framework Annotation Detection VulnerabilityVMware Spring Framework · org.springframework:spring-core
- CVE-2025-41248CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized typesVMware Spring Security · org.springframework.security:sprin…
- CVE-2025-41242CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containersVMware Spring Framework · org.springframework:spring-webmvc
- CVE-2025-41241Denial-of-service vulnerabilityVMware vCenter · VMware Cloud Foundation +2
- CVE-2025-41240Mounted Kubernetes Secrets under a predictable path located within the web server document rootVMware bitnamicharts/appsmith · VMware bitnamicharts/dru… +1
- CVE-2025-22227CVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP ClientVMware Reactor Netty · io.projectreactor.netty:reactor-nett…
- CVE-2025-41239vSockets information-disclosure vulnerabilityVMware ESXi · VMware Cloud Foundation +5
- CVE-2025-41238PVSCSI heap-overflow vulnerabilityVMware ESXi · VMware Cloud Foundation +4
- CVE-2025-41237VMCI integer-underflow vulnerabilityVMware Cloud Foundation · VMware vSphere Foundation +5
- CVE-2025-41236VMXNET3 integer-overflow vulnerabilityVMware ESXi · VMware Cloud Foundation +4
- CVE-2024-38824CVE-2024-38824 salt advisoryVMware SALT · salt
- CVE-2025-22242CVE-2025-22242 salt advisoryVMware SALT · salt
- CVE-2025-22241CVE-2025-22241 salt advisoryVMware SALT · salt
- CVE-2025-22240CVE-2025-22240 salt advisoryVMware SALT · salt
- CVE-2025-22239CVE-2025-22239 salt advisoryVMware SALT · salt
- CVE-2025-22238CVE-2025-22238 salt advisoryVMware SALT · salt
- CVE-2025-22237CVE-2025-22237 salt advisoryVMware SALT · salt
- CVE-2025-22236CVE-2025-22236 salt advisoryVMware SALT · salt
- CVE-2024-38825CVE-2024-38825 Salt AdvisoryVMware SALT · salt
- CVE-2024-38823CVE-2024-38823 Salt AdvisoryVMware SALT
- CVE-2024-38822CVE-2024-38822 Salt AdvisoryVMware SALT
- CVE-2025-41233Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability.VMware Avi Load Balancer
- CVE-2025-41234RFD Attack via “Content-Disposition” Header Sourced from RequestVMware Spring Framework · org.springframework:spring-web
- CVE-2025-22245VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation.VMware NSX
- CVE-2025-22244VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation.VMware NSX
- CVE-2025-22243VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation.VMware NSX
- CVE-2025-41235CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted ProxiesVMware Spring cloud Gateway · org.springframework.cloud:… +1
- CVE-2025-41228VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) VulnerabilityVMware vCenter Server · VMware Cloud Foundation +3
- CVE-2025-41227Denial-of-Service VulnerabilityVMware ESXi · VMware Cloud Foundation +4
- CVE-2025-41226Guest Operations Denial-of-Service VulnerabilityVMware ESXi · VMware Cloud Foundation +2
- CVE-2025-41225VMware vCenter Server authenticated command-execution vulnerabilityVMware vCenter Server · VMware Cloud Foundation +2
- CVE-2025-41230VMware Cloud Foundation Information Disclosure VulnerabilityVMware Cloud Foundation
- CVE-2025-41229VMware Cloud Foundation Directory Traversal VulnerabilityVMware Cloud Foundation
- CVE-2025-22248[pgpool] Unauthenticated access to postgres through pgpoolVMware Bitnami
- CVE-2025-22249VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)Vmware Aria Automation · VMware Cloud Foundation +1
- CVE-2025-22231VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)VMware Aria operations
- CVE-2025-22224VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.VMware ESXi · VMware Workstation +3
- CVE-2025-22222VMware Aria Operations information disclosure vulnerability (CVE-2025-22222)VMware Aria Operations
- CVE-2025-22221VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22221)VMware Aria Operations for Logs
- CVE-2025-22220VMware Aria Operations for Logs broken access control vulnerability (CVE-2025-22220)VMware Aria Operations for Logs
- CVE-2025-22219VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22219)VMware Aria Operations for Logs
- CVE-2025-22218VMware Aria Operations for Logs information disclosure vulnerabilityVMware Aria Operations for Logs
- CVE-2025-22215VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215)VMware Aria Automation · VMware Cloud Foundation
- CVE-2024-38834Stored cross-site scripting vulnerability (CVE-2024-38834)VMware Aria Operations
- CVE-2024-38833Stored cross-site scripting vulnerability (CVE-2024-38833)VMware Aria Operations
- CVE-2024-38832Stored cross-site scripting vulnerability (CVE-2024-38832)VMware Aria Operations
- CVE-2024-38831Local privilege escalation vulnerability (CVE-2024-38831)VMware Aria Operations
- CVE-2024-38830Local privilege escalation vulnerabilityVMware Aria Operations
- CVE-2024-38820CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match ExceptionVMware Spring · org.springframework:spring-context +1
- CVE-2024-22280VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280)VMware Aria Automation
- CVE-2024-22232Specially crafted url can be created which leads to a directory traversal in the salt file serverVMware Salt Project · salt
- CVE-2024-22231Syndic cache directory creation is vulnerable to a directory traversal attackVMware Salt Project · salt
- CVE-2024-22266VMware Avi Load Balancer updates address multiple vulnerabilitiesVMware Avi Load Balancer
- CVE-2024-22264VMware Avi Load Balancer updates address multiple vulnerabilitiesVMware Avi Load Balancer
- CVE-2024-22250Session Hijack Vulnerability in Deprecated EAP Browser PluginVMware Enhanced Authentication Plug-in
- CVE-2024-22245Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser PluginVMware Enhanced Authentication Plug-in
- CVE-2023-34056VMware vCenter Server Partial Information Disclosure VulnerabilityVMware vCenter Server · VMware Cloud Foundation
- CVE-2023-34048VMware vCenter Server Out-of-Bounds Write VulnerabilityVMware vCenter Server · VMware Cloud Foundation
- CVE-2023-34045VMware Fusion installer local privilege escalationVMware Fusion
- CVE-2023-34046VMware Fusion TOCTOU local privilege escalation vulnerabilityVMware Fusion
- CVE-2023-34044Information disclosure vulnerability in bluetooth device-sharing functionalityVMware Workstation · VMware Fusion
- CVE-2023-20891VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerabilityVMware Tanzu Application Service for VMs · VMware Isolation…
- CVE-2023-20896The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol.VMware vCenter Server · VMware Cloud Foundation
- CVE-2023-20895The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol.VMware vCenter Server · VMware Cloud Foundation
- CVE-2023-20894The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol.VMware vCenter Server · VMware Cloud Foundation
- CVE-2023-20893The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol.VMware vCenter Server · VMware Cloud Foundation
- CVE-2023-20892VMware vCenter Server heap-overflow vulnerabilityVMware vCenter Server · VMware Cloud Foundation
- CVE-2023-20867VMware Tools Authentication Bypass VulnerabilityVMware Tools
- CVE-2022-22964VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation that allows a user to escalate to root due to a vulneraVMware Horizon Agent for Linux
- CVE-2022-22962VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the default shared folder lVMware Horizon Agent for Linux
- CVE-2020-5426Scheduler for TAS can transmit privileged UAA token in plaintextVMware Tanzu Pivotal Scheduler
- CVE-2020-5425User Impersonation possible in Tanzu SSOSingle Sign-On for VMware Tanzu
- CVE-2020-5419RabbitMQ arbitrary code execution using local binary plantingVMware Tanzu RabbitMQ
- CVE-2020-5415Concourse's GitLab auth allows impersonationVMware Tanzu Concourse · github.com/concourse/concourse +1
- CVE-2020-5414App Autoscaler logs credentialsVMware Tanzu PCF Autoscaling · VMware Tanzu Operations M… +1
- CVE-2020-5396JMX Insecure Default Configuration in GemFireVMware Tanzu GemFire for VMs · VMware Tanzu VMware GemFire
- CVE-2019-11286JMX Credential Deserialization in GemFireVMware Tanzu VMware GemFire · VMware Tanzu GemFire for VMs
- CVE-2020-3971VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x beforeVMware ESXi · VMware Workstation +1
- CVE-2020-3965VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3964VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3963VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3966VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3968VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3967VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3970VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3962VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3969VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3959VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware FusionVMware ESXi · VMware Workstation +1
- CVE-2020-3958VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware FusionVMware ESXi · VMware Workstation +1
- CVE-2020-3957VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) containVMware Fusion · VMware Remote Console for Mac +1
- CVE-2020-3955ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML wVMware ESXi
- CVE-2020-3946InstallBuilder AutoUpdate tool and regular installers enabling <checkForUpdates> built with versions earlier than 19.11 are vulnerable to BiVMware InstallBuilder
- CVE-2019-5543For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware WorkstatiVMware Horizon Client for Windows · VMware Remote Consol… +1
- CVE-2020-3947VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp.VMware Workstation · VMware Fusion
- CVE-2020-3948Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vulnVMware Workstation · VMware Fusion
- CVE-2020-3943vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configuVMWare vRealize Operations for Horizon Adapter
- CVE-2020-3944vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading toVMWare vRealize Operations for Horizon Adapter
- CVE-2020-3945vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability dueVMWare vRealize Operations for Horizon Adapter
- CVE-2020-3940VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability.VMware Workspace ONE SDK
- CVE-2020-3941The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual MachineVMware Tools for Windows
- CVE-2019-5539VMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4) contain a DLL hijacking vVMware Workstation · VMware Horizon View Agent
- CVE-2019-5542VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the RPC handler.VMware Workstation and Fusion
- CVE-2019-5541VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an out-of-bounds write vulnerability in the e1000e virtual nVMware Workstation and Fusion
- CVE-2019-5540VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability in vmnetdhcp.VMware Workstation and Fusion
- CVE-2019-5533In VMware SD-WAN by VeloCloud versions 3.x prior to 3.3.0, the VeloCloud Orchestrator parameter authorization check mistakenly allows enterpVMware SD-WAN by VeloCloud
- CVE-2019-5521VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and VMware ESXi · VMware Workstation +1
- CVE-2019-5531VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMwareVMware vSphere ESXi · VMware vCenter Server
- CVE-2019-5532VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerabilityVMware vCenter Server
- CVE-2019-5534VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerabilityVMware vCenter Server
- CVE-2019-5528VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process.VMware ESXi
- CVE-2019-5525VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend.VMware Workstation
- CVE-2019-5522VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guVMware Tools for Windows
- CVE-2019-5517VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), FusVMware ESXi · VMware Workstation +1
- CVE-2019-5520VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), FusVMware ESXi · VMware Workstation +1
- CVE-2019-5516VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), FusVMware ESXi · VMware Workstation +1
- CVE-2019-5515VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-boVMware Workstation and Fusion
- CVE-2019-5524VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual neVMware Workstation, VMware Fusion
- CVE-2019-5518VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.VMware ESXi, Workstation, Fusion
- CVE-2019-5519VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.VMware ESXi, Workstation, Fusion
- CVE-2019-5514VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socVMware Fusion
- CVE-2019-5523VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerability in the Tenant and VMware vCloud Director for Service Providers
- CVE-2018-6981VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG,VMware ESXi, VMware Workstation, and VMware Fusion
- CVE-2018-6982VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in thVMware ESXi
- CVE-2018-6983VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer oveVMware Workstation and Fusion
- CVE-2018-6980VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user rVMware vRealize Log Insight
- CVE-2018-6974VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x beforVMware ESXi · VMware Workstation +1
- CVE-2018-6977VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infiVMware ESXi · VMware Workstation +1
- CVE-2018-6979The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.VMware Workspace ONE Unified Endpoint Management Console
- CVE-2018-6975The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entries in the Agent are nVMware AirWatch Agent for iOS prior to
- CVE-2018-6976The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database.VMware Content Locker for iOS
- CVE-2018-6973VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device.VMware Workstation · VMware Fusion
- CVE-2018-6970VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bVMware Horizon 6, Horizon 7, and Horizon Client
- CVE-2018-6971VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials VMware Horizon View Agent
- CVE-2018-6972VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806VMware ESXi · VMware Workstation +1
- CVE-2018-6969VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS.VMware Tools
- CVE-2018-6965VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds reVMware ESXi, Workstation, and Fusion
- CVE-2018-6966VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds reVMware ESXi, Workstation, and Fusion
- CVE-2018-6967VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds reVMware ESXi, Workstation, and Fusion
- CVE-2018-6961VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component.VMware NSX SD-WAN by VeloCloud
- CVE-2018-6968The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnVMware AirWatch Agent
- CVE-2018-6964VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUVMware Horizon Client for Linux
- CVE-2018-6962VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation.VMware Fusion
- CVE-2018-6963VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due toVMware Workstation · VMware Fusion
- CVE-2017-4952VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an auVMware Xenon
- CVE-2018-6960VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authenVMware Horizon DaaS
- CVE-2018-6958VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack.VMware vRealize Automation
- CVE-2018-6959VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs.VMware vRealize Automation
- CVE-2018-6957VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can beVMware Workstation · VMware Fusion
- CVE-2017-4947VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via XenoVMware vRealize Automation · VMware vSphere Integrated Cont…
- CVE-2017-4951VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the AVMware AirWatch Console
- CVE-2017-4949VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled.VMware Workstation Pro / Player · VMware Fusion
- CVE-2017-4950VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled.VMware Workstation Pro / Player · VMware Fusion