# cve.now: VMware

The newest entries affecting VMware (up to 200). Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-59347](https://cve.now/CVE-2026-59347.md): VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability (CVSS 8.1, VMware Workstation · VMware Fusion)
- [CVE-2026-59346](https://cve.now/CVE-2026-59346.md): VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability (CVSS 9.3, VMware Workstation · VMware Fusion)
- [CVE-2026-59355](https://cve.now/CVE-2026-59355.md): Spring Authorization Server: Open Redirect via request\_uri parameter (CVSS 6.1, VMware Spring Authorization Server)
- [CVE-2026-59354](https://cve.now/CVE-2026-59354.md): Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata (CVSS 9.6, VMware by Broadcom Spring Security)
- [CVE-2026-41709](https://cve.now/CVE-2026-41709.md): ESX insufficient logging vulnerability (CVSS 2.7, KEV, VMware Cloud Foundation · VMware vSphere Foundation +2)
- [CVE-2026-41703](https://cve.now/CVE-2026-41703.md): Out-of-bounds read vulnerability (CVSS 7.6, VMware Cloud Foundation · VMware vSphere Foundation +4)
- [CVE-2026-47876](https://cve.now/CVE-2026-47876.md): VMXNET3 out-of-bounds write vulnerability (CVSS 9.3, VMware Cloud Foundation · VMware vSphere Foundation +2)
- [CVE-2026-59309](https://cve.now/CVE-2026-59309.md): vCenter authentication-bypass vulnerability (CVSS 9.8, VMware Cloud Foundation · VMware vSphere Foundation +3)
- [CVE-2026-59310](https://cve.now/CVE-2026-59310.md): vCenter directory-traversal vulnerability (CVSS 9.8, KEV, VMware Cloud Foundation · VMware vSphere Foundation +3)
- [CVE-2026-47871](https://cve.now/CVE-2026-47871.md): VMware Avi Load Balancer Directory Traversal Vulnerability (CVSS 8.8, VMware Avi Load Balancer)
- [CVE-2026-47870](https://cve.now/CVE-2026-47870.md): VMware Avi Load Balancer Privilege Escalation Vulnerability (CVSS 7.1, VMware Avi Load Balancer)
- [CVE-2026-47869](https://cve.now/CVE-2026-47869.md): VMware Avi Load Balancer Remote Code Execution Vulnerability (CVSS 8.7, VMware Avi Load Balancer)
- [CVE-2026-47868](https://cve.now/CVE-2026-47868.md): VMware Avi Load Balancer Local Privilege Escalation Vulnerability (CVSS 7.8, VMware Avi Load Balancer)
- [CVE-2026-47867](https://cve.now/CVE-2026-47867.md): VMware Avi Load Balancer Remote Code Execution Vulnerability (CVSS 8.7, VMware Avi Load Balancer)
- [CVE-2026-47866](https://cve.now/CVE-2026-47866.md): VMware Avi Load Balancer Authorization Bypass Vulnerability (CVSS 8.3, VMware Avi Load Balancer)
- [CVE-2026-47865](https://cve.now/CVE-2026-47865.md): VMware Avi Load Balancer Authentication Bypass Vulnerability (CVSS 9.8, VMware Avi Load Balancer)
- [CVE-2026-59269](https://cve.now/CVE-2026-59269.md): Privilege Escalation via Active Directory LDAP injection in Pinniped Supervisor can be executed by an attacker who can edit LDAP Group DN entries (CVSS 3.8, VMware Pinniped)
- [CVE-2026-41724](https://cve.now/CVE-2026-41724.md): VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 8.0, VMware VCF operations · VMware Aria Operations +1)
- [CVE-2026-41723](https://cve.now/CVE-2026-41723.md): VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 8.0, VMware VCF operations · VMware Aria Operations +1)
- [CVE-2026-41722](https://cve.now/CVE-2026-41722.md): VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 8.0, VMware VCF operations · VMware Aria Operations +1)
- [CVE-2026-41702](https://cve.now/CVE-2026-41702.md): TOCTOU local privilege escalation vulnerability (CVSS 7.8, VMware Fusion)
- [CVE-2026-41713](https://cve.now/CVE-2026-41713.md): Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor (CVSS 8.2, VMware Spring AI · org.springframework.ai:spring-ai-client-…)
- [CVE-2026-41712](https://cve.now/CVE-2026-41712.md): ChatMemory DEFAULT\_CONVERSATION\_ID causes unintended cross-user data leakage (CVSS 7.5, VMware Spring AI · org.springframework.ai:spring-ai-clie… +2)
- [CVE-2026-22745](https://cve.now/CVE-2026-22745.md): CVE-2026-22745 : Denial of service in static resource handling on Windows platforms (CVSS 5.3, VMware Spring Framework · org.springframework:spring-web… +1)
- [CVE-2026-22741](https://cve.now/CVE-2026-22741.md): Static resource cache poisoning in Spring MVC and WebFlux (CVSS 3.1, VMware Spring Framework · org.springframework:spring-web… +1)
- [CVE-2026-22740](https://cve.now/CVE-2026-22740.md): Spring Framework DoS with Multipart Temp Files in WebFlux (CVSS 6.5, VMware Spring Framework · org.springframework:spring-webflux)
- [CVE-2026-40966](https://cve.now/CVE-2026-40966.md): VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration (CVSS 5.9, VMware Spring AI · org.springframework.ai:spring-ai-advisor…)
- [CVE-2026-22750](https://cve.now/CVE-2026-22750.md): SSL bundle configuration silently bypassed in Spring Cloud Gateway (CVSS 7.5, VMware Spring Cloud Gateway · org.springframework.cloud:spr…)
- [CVE-2026-22732](https://cve.now/CVE-2026-22732.md): Under Some Conditions Spring Security HTTP Headers Are not Written (CVSS 9.1, VMware Spring Security · org.springframework.security:sprin…)
- [CVE-2026-22729](https://cve.now/CVE-2026-22729.md): CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter (CVSS 8.6, VMware Spring AI · org.springframework.ai:spring-ai-vector-…)
- [CVE-2026-22730](https://cve.now/CVE-2026-22730.md): CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter (CVSS 8.8, VMware Spring AI · org.springframework.ai:spring-ai-mariadb…)
- [CVE-2026-22717](https://cve.now/CVE-2026-22717.md): VMware Workstation out-of-bound read vulnerability (CVSS 2.7, VMware Workstation)
- [CVE-2026-22716](https://cve.now/CVE-2026-22716.md): VMware Workstation out-of-bounds write vulnerability (CVSS 5.0, VMware Workstation)
- [CVE-2026-22722](https://cve.now/CVE-2026-22722.md): VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash (CVSS 6.1, VMware Workstation)
- [CVE-2026-22715](https://cve.now/CVE-2026-22715.md): VMware Workstation/Fusion NAT vulnerability (CVSS 5.9, VMware Workstation · VMware Fusion)
- [CVE-2026-22721](https://cve.now/CVE-2026-22721.md): VMware Aria Operations privilege escalation vulnerability (CVSS 6.2, VMware Aria Operations · VMware Cloud Foundation +2)
- [CVE-2026-22720](https://cve.now/CVE-2026-22720.md): VMware Aria Operations stored cross-site scripting vulnerability (CVSS 8.0, VMware Aria Operations · VMware Cloud Foundation Operati… +2)
- [CVE-2026-22719](https://cve.now/CVE-2026-22719.md): VMware Aria Operations command injection vulnerability (CVSS 8.1, KEV, VMware Aria Operations · VMware Cloud Foundation Operati… +2)
- [CVE-2026-2818](https://cve.now/CVE-2026-2818.md): Zip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific) (CVSS 8.2, VMware Spring Data Geode · VMware Spring Data Gemfire)
- [CVE-2026-2817](https://cve.now/CVE-2026-2817.md): Spring Data Geode Insecure Temporary Directory Usage (CVSS 4.4, VMware Spring Data Geode · VMware Spring Data Gemfire)
- [CVE-2025-41254](https://cve.now/CVE-2025-41254.md): Spring Framework STOMP CSRF Vulnerability (CVSS 4.3, VMware Spring Framework · org.springframework:spring-websoc…)
- [CVE-2025-41253](https://cve.now/CVE-2025-41253.md): Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables (CVSS 7.5, VMware Spring Cloud Gateway Server Webflux · org.springfram…)
- [CVE-2025-41252](https://cve.now/CVE-2025-41252.md): Username enumeration vulnerability (CVSS 7.5, VMware NSX)
- [CVE-2025-41251](https://cve.now/CVE-2025-41251.md): Weak password recovery vulnerability (CVSS 8.1, vmware NSX)
- [CVE-2025-41250](https://cve.now/CVE-2025-41250.md): Header injection vulnerability (CVSS 8.5, VMware vCenter · VMware Cloud Foundation +3)
- [CVE-2025-41245](https://cve.now/CVE-2025-41245.md): VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) (CVSS 4.9, VMware Aria Operations · VMware Cloud Foundation +2)
- [CVE-2025-41244](https://cve.now/CVE-2025-41244.md): VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) (CVSS 7.8, KEV, VMware VCF operations · VMware tools +4)
- [CVE-2025-41246](https://cve.now/CVE-2025-41246.md): Improper authorisation vulnerability (CVSS 7.6, VMware Tools)
- [CVE-2025-41249](https://cve.now/CVE-2025-41249.md): CVE-2025-41249: Spring Framework Annotation Detection Vulnerability (CVSS 7.5, VMware Spring Framework · org.springframework:spring-core)
- [CVE-2025-41248](https://cve.now/CVE-2025-41248.md): CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types (CVSS 7.5, VMware Spring Security · org.springframework.security:sprin…)
- [CVE-2025-41242](https://cve.now/CVE-2025-41242.md): CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers (CVSS 5.9, VMware Spring Framework · org.springframework:spring-webmvc)
- [CVE-2025-41241](https://cve.now/CVE-2025-41241.md): Denial-of-service vulnerability (CVSS 4.4, VMware vCenter · VMware Cloud Foundation +2)
- [CVE-2025-41240](https://cve.now/CVE-2025-41240.md): Mounted Kubernetes Secrets under a predictable path located within the web server document root (CVSS 10.0, VMware bitnamicharts/appsmith · VMware bitnamicharts/dru… +1)
- [CVE-2025-22227](https://cve.now/CVE-2025-22227.md): CVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP Client (CVSS 6.1, VMware Reactor Netty · io.projectreactor.netty:reactor-nett…)
- [CVE-2025-41239](https://cve.now/CVE-2025-41239.md): vSockets information-disclosure vulnerability (CVSS 7.1, VMware ESXi · VMware Cloud Foundation +5)
- [CVE-2025-41238](https://cve.now/CVE-2025-41238.md): PVSCSI heap-overflow vulnerability (CVSS 9.3, VMware ESXi · VMware Cloud Foundation +4)
- [CVE-2025-41237](https://cve.now/CVE-2025-41237.md): VMCI integer-underflow vulnerability (CVSS 9.3, VMware Cloud Foundation · VMware vSphere Foundation +5)
- [CVE-2025-41236](https://cve.now/CVE-2025-41236.md): VMXNET3 integer-overflow vulnerability (CVSS 9.3, VMware ESXi · VMware Cloud Foundation +4)
- [CVE-2024-38824](https://cve.now/CVE-2024-38824.md): CVE-2024-38824 salt advisory (CVSS 9.6, VMware SALT · salt)
- [CVE-2025-22242](https://cve.now/CVE-2025-22242.md): CVE-2025-22242 salt advisory (CVSS 5.6, VMware SALT · salt)
- [CVE-2025-22241](https://cve.now/CVE-2025-22241.md): CVE-2025-22241 salt advisory (CVSS 5.6, VMware SALT · salt)
- [CVE-2025-22240](https://cve.now/CVE-2025-22240.md): CVE-2025-22240 salt advisory (CVSS 6.3, VMware SALT · salt)
- [CVE-2025-22239](https://cve.now/CVE-2025-22239.md): CVE-2025-22239 salt advisory (CVSS 8.1, VMware SALT · salt)
- [CVE-2025-22238](https://cve.now/CVE-2025-22238.md): CVE-2025-22238 salt advisory (CVSS 4.2, VMware SALT · salt)
- [CVE-2025-22237](https://cve.now/CVE-2025-22237.md): CVE-2025-22237 salt advisory (CVSS 6.7, VMware SALT · salt)
- [CVE-2025-22236](https://cve.now/CVE-2025-22236.md): CVE-2025-22236 salt advisory (CVSS 8.1, VMware SALT · salt)
- [CVE-2024-38825](https://cve.now/CVE-2024-38825.md): CVE-2024-38825 Salt Advisory (CVSS 6.4, VMware SALT · salt)
- [CVE-2024-38823](https://cve.now/CVE-2024-38823.md): CVE-2024-38823 Salt Advisory (CVSS 2.7, VMware SALT)
- [CVE-2024-38822](https://cve.now/CVE-2024-38822.md): CVE-2024-38822 Salt Advisory (CVSS 2.7, VMware SALT)
- [CVE-2025-41233](https://cve.now/CVE-2025-41233.md): Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. (CVSS 6.8, VMware Avi Load Balancer)
- [CVE-2025-41234](https://cve.now/CVE-2025-41234.md): RFD Attack via “Content-Disposition” Header Sourced from Request (CVSS 6.5, VMware Spring Framework · org.springframework:spring-web)
- [CVE-2025-22245](https://cve.now/CVE-2025-22245.md): VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation. (CVSS 5.9, VMware NSX)
- [CVE-2025-22244](https://cve.now/CVE-2025-22244.md): VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation. (CVSS 6.9, VMware NSX)
- [CVE-2025-22243](https://cve.now/CVE-2025-22243.md): VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation. (CVSS 7.5, VMware NSX)
- [CVE-2025-41235](https://cve.now/CVE-2025-41235.md): CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies (CVSS 8.6, VMware Spring cloud Gateway · org.springframework.cloud:… +1)
- [CVE-2025-41228](https://cve.now/CVE-2025-41228.md): VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability (CVSS 4.3, VMware vCenter Server · VMware Cloud Foundation +3)
- [CVE-2025-41227](https://cve.now/CVE-2025-41227.md): Denial-of-Service Vulnerability (CVSS 5.5, VMware ESXi · VMware Cloud Foundation +4)
- [CVE-2025-41226](https://cve.now/CVE-2025-41226.md): Guest Operations Denial-of-Service Vulnerability (CVSS 6.8, VMware ESXi · VMware Cloud Foundation +2)
- [CVE-2025-41225](https://cve.now/CVE-2025-41225.md): VMware vCenter Server authenticated command-execution vulnerability (CVSS 8.8, VMware vCenter Server · VMware Cloud Foundation +2)
- [CVE-2025-41230](https://cve.now/CVE-2025-41230.md): VMware Cloud Foundation Information Disclosure Vulnerability (CVSS 7.5, VMware Cloud Foundation)
- [CVE-2025-41229](https://cve.now/CVE-2025-41229.md): VMware Cloud Foundation Directory Traversal Vulnerability (CVSS 8.2, VMware Cloud Foundation)
- [CVE-2025-22248](https://cve.now/CVE-2025-22248.md): \[pgpool\] Unauthenticated access to postgres through pgpool (CVSS 9.4, VMware Bitnami)
- [CVE-2025-22249](https://cve.now/CVE-2025-22249.md): VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) (CVSS 8.2, Vmware Aria Automation · VMware Cloud Foundation +1)
- [CVE-2025-22231](https://cve.now/CVE-2025-22231.md): VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231) (CVSS 7.8, VMware Aria operations)
- [CVE-2025-22224](https://cve.now/CVE-2025-22224.md): VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. (CVSS 9.3, KEV, VMware ESXi · VMware Workstation +3)
- [CVE-2025-22222](https://cve.now/CVE-2025-22222.md): VMware Aria Operations information disclosure vulnerability (CVE-2025-22222) (CVSS 7.7, VMware Aria Operations)
- [CVE-2025-22221](https://cve.now/CVE-2025-22221.md): VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22221) (CVSS 5.2, VMware Aria Operations for Logs)
- [CVE-2025-22220](https://cve.now/CVE-2025-22220.md): VMware Aria Operations for Logs broken access control vulnerability (CVE-2025-22220) (CVSS 4.3, VMware Aria Operations for Logs)
- [CVE-2025-22219](https://cve.now/CVE-2025-22219.md): VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22219) (CVSS 6.8, VMware Aria Operations for Logs)
- [CVE-2025-22218](https://cve.now/CVE-2025-22218.md): VMware Aria Operations for Logs information disclosure vulnerability (CVSS 8.5, VMware Aria Operations for Logs)
- [CVE-2025-22215](https://cve.now/CVE-2025-22215.md): VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215) (CVSS 4.3, VMware Aria Automation · VMware Cloud Foundation)
- [CVE-2024-38834](https://cve.now/CVE-2024-38834.md): Stored cross-site scripting vulnerability (CVE-2024-38834) (CVSS 6.5, VMware Aria Operations)
- [CVE-2024-38833](https://cve.now/CVE-2024-38833.md): Stored cross-site scripting vulnerability (CVE-2024-38833) (CVSS 6.8, VMware Aria Operations)
- [CVE-2024-38832](https://cve.now/CVE-2024-38832.md): Stored cross-site scripting vulnerability (CVE-2024-38832) (CVSS 7.1, VMware Aria Operations)
- [CVE-2024-38831](https://cve.now/CVE-2024-38831.md): Local privilege escalation vulnerability (CVE-2024-38831) (CVSS 7.8, VMware Aria Operations)
- [CVE-2024-38830](https://cve.now/CVE-2024-38830.md): Local privilege escalation vulnerability (CVSS 7.8, VMware Aria Operations)
- [CVE-2024-38820](https://cve.now/CVE-2024-38820.md): CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception (CVSS 3.1, VMware Spring · org.springframework:spring-context +1)
- [CVE-2024-22280](https://cve.now/CVE-2024-22280.md): VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280) (CVSS 8.5, VMware Aria Automation)
- [CVE-2024-22232](https://cve.now/CVE-2024-22232.md): Specially crafted url can be created which leads to a directory traversal in the salt file server (CVSS 7.7, VMware Salt Project · salt)
- [CVE-2024-22231](https://cve.now/CVE-2024-22231.md): Syndic cache directory creation is vulnerable to a directory traversal attack (CVSS 5.0, VMware Salt Project · salt)
- [CVE-2024-22266](https://cve.now/CVE-2024-22266.md): VMware Avi Load Balancer updates address multiple vulnerabilities (CVSS 6.5, VMware Avi Load Balancer)
- [CVE-2024-22264](https://cve.now/CVE-2024-22264.md): VMware Avi Load Balancer updates address multiple vulnerabilities (CVSS 7.2, VMware Avi Load Balancer)
- [CVE-2024-22250](https://cve.now/CVE-2024-22250.md): Session Hijack Vulnerability in Deprecated EAP Browser Plugin (CVSS 7.8, VMware Enhanced Authentication Plug-in)
- [CVE-2024-22245](https://cve.now/CVE-2024-22245.md): Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin (CVSS 9.6, VMware Enhanced Authentication Plug-in)
- [CVE-2023-34056](https://cve.now/CVE-2023-34056.md): VMware vCenter Server Partial Information Disclosure Vulnerability (CVSS 4.3, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-34048](https://cve.now/CVE-2023-34048.md): VMware vCenter Server Out-of-Bounds Write Vulnerability (CVSS 9.8, KEV, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-34045](https://cve.now/CVE-2023-34045.md): VMware Fusion installer local privilege escalation (CVSS 6.6, VMware Fusion)
- [CVE-2023-34046](https://cve.now/CVE-2023-34046.md): VMware Fusion TOCTOU local privilege escalation vulnerability (CVSS 6.7, VMware Fusion)
- [CVE-2023-34044](https://cve.now/CVE-2023-34044.md): Information disclosure vulnerability in bluetooth device-sharing functionality (CVSS 7.1, VMware Workstation · VMware Fusion)
- [CVE-2023-20891](https://cve.now/CVE-2023-20891.md): VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability (CVSS 6.5, VMware Tanzu Application Service for VMs · VMware Isolation…)
- [CVE-2023-20896](https://cve.now/CVE-2023-20896.md): The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. (CVSS 5.9, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-20895](https://cve.now/CVE-2023-20895.md): The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. (CVSS 8.1, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-20894](https://cve.now/CVE-2023-20894.md): The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. (CVSS 8.1, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-20893](https://cve.now/CVE-2023-20893.md): The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. (CVSS 8.1, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-20892](https://cve.now/CVE-2023-20892.md): VMware vCenter Server heap-overflow vulnerability (CVSS 8.1, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-20867](https://cve.now/CVE-2023-20867.md): VMware Tools Authentication Bypass Vulnerability (CVSS 3.9, KEV, VMware Tools)
- [CVE-2022-22964](https://cve.now/CVE-2022-22964.md): VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation that allows a user to escalate to root due to a vulnera (no CVSS, VMware Horizon Agent for Linux)
- [CVE-2022-22962](https://cve.now/CVE-2022-22962.md): VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the default shared folder l (no CVSS, VMware Horizon Agent for Linux)
- [CVE-2020-5426](https://cve.now/CVE-2020-5426.md): Scheduler for TAS can transmit privileged UAA token in plaintext (CVSS 8.6, VMware Tanzu Pivotal Scheduler)
- [CVE-2020-5425](https://cve.now/CVE-2020-5425.md): User Impersonation possible in Tanzu SSO (CVSS 7.5, Single Sign-On for VMware Tanzu)
- [CVE-2020-5419](https://cve.now/CVE-2020-5419.md): RabbitMQ arbitrary code execution using local binary planting (CVSS 6.7, VMware Tanzu RabbitMQ)
- [CVE-2020-5415](https://cve.now/CVE-2020-5415.md): Concourse's GitLab auth allows impersonation (CVSS 10.0, VMware Tanzu Concourse · github.com/concourse/concourse +1)
- [CVE-2020-5414](https://cve.now/CVE-2020-5414.md): App Autoscaler logs credentials (CVSS 5.7, VMware Tanzu PCF Autoscaling · VMware Tanzu Operations M… +1)
- [CVE-2020-5396](https://cve.now/CVE-2020-5396.md): JMX Insecure Default Configuration in GemFire (no CVSS, VMware Tanzu GemFire for VMs · VMware Tanzu VMware GemFire)
- [CVE-2019-11286](https://cve.now/CVE-2019-11286.md): JMX Credential Deserialization in GemFire (CVSS 9.0, VMware Tanzu VMware GemFire · VMware Tanzu GemFire for VMs)
- [CVE-2020-3971](https://cve.now/CVE-2020-3971.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3965](https://cve.now/CVE-2020-3965.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3964](https://cve.now/CVE-2020-3964.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3963](https://cve.now/CVE-2020-3963.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3966](https://cve.now/CVE-2020-3966.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3968](https://cve.now/CVE-2020-3968.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3967](https://cve.now/CVE-2020-3967.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3970](https://cve.now/CVE-2020-3970.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3962](https://cve.now/CVE-2020-3962.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3969](https://cve.now/CVE-2020-3969.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3959](https://cve.now/CVE-2020-3959.md): VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3958](https://cve.now/CVE-2020-3958.md): VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3957](https://cve.now/CVE-2020-3957.md): VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain (no CVSS, VMware Fusion · VMware Remote Console for Mac +1)
- [CVE-2020-3955](https://cve.now/CVE-2020-3955.md): ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML w (no CVSS, VMware ESXi)
- [CVE-2020-3946](https://cve.now/CVE-2020-3946.md): InstallBuilder AutoUpdate tool and regular installers enabling \<checkForUpdates\> built with versions earlier than 19.11 are vulnerable to Bi (no CVSS, VMware InstallBuilder)
- [CVE-2019-5543](https://cve.now/CVE-2019-5543.md): For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstati (no CVSS, VMware Horizon Client for Windows · VMware Remote Consol… +1)
- [CVE-2020-3947](https://cve.now/CVE-2020-3947.md): VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp. (no CVSS, VMware Workstation · VMware Fusion)
- [CVE-2020-3948](https://cve.now/CVE-2020-3948.md): Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vuln (no CVSS, VMware Workstation · VMware Fusion)
- [CVE-2020-3943](https://cve.now/CVE-2020-3943.md): vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configu (no CVSS, VMWare vRealize Operations for Horizon Adapter)
- [CVE-2020-3944](https://cve.now/CVE-2020-3944.md): vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to (no CVSS, VMWare vRealize Operations for Horizon Adapter)
- [CVE-2020-3945](https://cve.now/CVE-2020-3945.md): vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability due (no CVSS, VMWare vRealize Operations for Horizon Adapter)
- [CVE-2020-3940](https://cve.now/CVE-2020-3940.md): VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability. (no CVSS, VMware Workspace ONE SDK)
- [CVE-2020-3941](https://cve.now/CVE-2020-3941.md): The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine (no CVSS, VMware Tools for Windows)
- [CVE-2019-5539](https://cve.now/CVE-2019-5539.md): VMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4) contain a DLL hijacking v (no CVSS, VMware Workstation · VMware Horizon View Agent)
- [CVE-2019-5542](https://cve.now/CVE-2019-5542.md): VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the RPC handler. (no CVSS, VMware Workstation and Fusion)
- [CVE-2019-5541](https://cve.now/CVE-2019-5541.md): VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an out-of-bounds write vulnerability in the e1000e virtual n (no CVSS, VMware Workstation and Fusion)
- [CVE-2019-5540](https://cve.now/CVE-2019-5540.md): VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability in vmnetdhcp. (no CVSS, VMware Workstation and Fusion)
- [CVE-2019-5533](https://cve.now/CVE-2019-5533.md): In VMware SD-WAN by VeloCloud versions 3.x prior to 3.3.0, the VeloCloud Orchestrator parameter authorization check mistakenly allows enterp (no CVSS, VMware SD-WAN by VeloCloud)
- [CVE-2019-5521](https://cve.now/CVE-2019-5521.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2019-5531](https://cve.now/CVE-2019-5531.md): VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMware (no CVSS, VMware vSphere ESXi · VMware vCenter Server)
- [CVE-2019-5532](https://cve.now/CVE-2019-5532.md): VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability (no CVSS, VMware vCenter Server)
- [CVE-2019-5534](https://cve.now/CVE-2019-5534.md): VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability (no CVSS, VMware vCenter Server)
- [CVE-2019-5528](https://cve.now/CVE-2019-5528.md): VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. (no CVSS, VMware ESXi)
- [CVE-2019-5525](https://cve.now/CVE-2019-5525.md): VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. (no CVSS, VMware Workstation)
- [CVE-2019-5522](https://cve.now/CVE-2019-5522.md): VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows gu (no CVSS, VMware Tools for Windows)
- [CVE-2019-5517](https://cve.now/CVE-2019-5517.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2019-5520](https://cve.now/CVE-2019-5520.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2019-5516](https://cve.now/CVE-2019-5516.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2019-5515](https://cve.now/CVE-2019-5515.md): VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bo (no CVSS, VMware Workstation and Fusion)
- [CVE-2019-5524](https://cve.now/CVE-2019-5524.md): VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual ne (no CVSS, VMware Workstation, VMware Fusion)
- [CVE-2019-5518](https://cve.now/CVE-2019-5518.md): VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14. (no CVSS, VMware ESXi, Workstation, Fusion)
- [CVE-2019-5519](https://cve.now/CVE-2019-5519.md): VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14. (no CVSS, VMware ESXi, Workstation, Fusion)
- [CVE-2019-5514](https://cve.now/CVE-2019-5514.md): VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web soc (no CVSS, VMware Fusion)
- [CVE-2019-5523](https://cve.now/CVE-2019-5523.md): VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerability in the Tenant and (no CVSS, VMware vCloud Director for Service Providers)
- [CVE-2018-6981](https://cve.now/CVE-2018-6981.md): VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, (no CVSS, VMware ESXi, VMware Workstation, and VMware Fusion)
- [CVE-2018-6982](https://cve.now/CVE-2018-6982.md): VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in th (no CVSS, VMware ESXi)
- [CVE-2018-6983](https://cve.now/CVE-2018-6983.md): VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer ove (no CVSS, VMware Workstation and Fusion)
- [CVE-2018-6980](https://cve.now/CVE-2018-6980.md): VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user r (no CVSS, VMware vRealize Log Insight)
- [CVE-2018-6974](https://cve.now/CVE-2018-6974.md): VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x befor (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2018-6977](https://cve.now/CVE-2018-6977.md): VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infi (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2018-6979](https://cve.now/CVE-2018-6979.md): The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9. (no CVSS, VMware Workspace ONE Unified Endpoint Management Console)
- [CVE-2018-6975](https://cve.now/CVE-2018-6975.md): The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entries in the Agent are n (no CVSS, VMware AirWatch Agent for iOS prior to)
- [CVE-2018-6976](https://cve.now/CVE-2018-6976.md): The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. (no CVSS, VMware Content Locker for iOS)
- [CVE-2018-6973](https://cve.now/CVE-2018-6973.md): VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. (no CVSS, VMware Workstation · VMware Fusion)
- [CVE-2018-6970](https://cve.now/CVE-2018-6970.md): VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-b (no CVSS, VMware Horizon 6, Horizon 7, and Horizon Client)
- [CVE-2018-6971](https://cve.now/CVE-2018-6971.md): VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials (no CVSS, VMware Horizon View Agent)
- [CVE-2018-6972](https://cve.now/CVE-2018-6972.md): VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806 (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2018-6969](https://cve.now/CVE-2018-6969.md): VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. (no CVSS, VMware Tools)
- [CVE-2018-6965](https://cve.now/CVE-2018-6965.md): VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds re (no CVSS, VMware ESXi, Workstation, and Fusion)
- [CVE-2018-6966](https://cve.now/CVE-2018-6966.md): VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds re (no CVSS, VMware ESXi, Workstation, and Fusion)
- [CVE-2018-6967](https://cve.now/CVE-2018-6967.md): VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds re (no CVSS, VMware ESXi, Workstation, and Fusion)
- [CVE-2018-6961](https://cve.now/CVE-2018-6961.md): VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. (CVSS 8.1, KEV, VMware NSX SD-WAN by VeloCloud)
- [CVE-2018-6968](https://cve.now/CVE-2018-6968.md): The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vuln (no CVSS, VMware AirWatch Agent)
- [CVE-2018-6964](https://cve.now/CVE-2018-6964.md): VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SU (no CVSS, VMware Horizon Client for Linux)
- [CVE-2018-6962](https://cve.now/CVE-2018-6962.md): VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation. (no CVSS, VMware Fusion)
- [CVE-2018-6963](https://cve.now/CVE-2018-6963.md): VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to (no CVSS, VMware Workstation · VMware Fusion)
- [CVE-2017-4952](https://cve.now/CVE-2017-4952.md): VMware Xenon 1.x, prior to 1.5.4-CR7\_1, 1.5.7\_7, 1.5.4-CR6\_2, 1.3.7-CR1\_2, 1.1.0-CR0-3, 1.1.0-CR3\_1,1.4.2-CR4\_1, and 1.5.4\_8, contains an au (no CVSS, VMware Xenon)
- [CVE-2018-6960](https://cve.now/CVE-2018-6960.md): VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authen (no CVSS, VMware Horizon DaaS)
- [CVE-2018-6958](https://cve.now/CVE-2018-6958.md): VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. (no CVSS, VMware vRealize Automation)
- [CVE-2018-6959](https://cve.now/CVE-2018-6959.md): VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. (no CVSS, VMware vRealize Automation)
- [CVE-2018-6957](https://cve.now/CVE-2018-6957.md): VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be (no CVSS, VMware Workstation · VMware Fusion)
- [CVE-2017-4947](https://cve.now/CVE-2017-4947.md): VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xeno (no CVSS, VMware vRealize Automation · VMware vSphere Integrated Cont…)
- [CVE-2017-4951](https://cve.now/CVE-2017-4951.md): VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the A (no CVSS, VMware AirWatch Console)
- [CVE-2017-4949](https://cve.now/CVE-2017-4949.md): VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. (no CVSS, VMware Workstation Pro / Player · VMware Fusion)
- [CVE-2017-4950](https://cve.now/CVE-2017-4950.md): VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled. (no CVSS, VMware Workstation Pro / Player · VMware Fusion)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/tech/vmware
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.