# cve.now: VMware

The newest entries naming VMware as an affected vendor (up to 200), of 241 in all, 8 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-59347](https://cve.now/CVE-2026-59347.md): VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability (CVSS 8.1)
- [CVE-2026-59346](https://cve.now/CVE-2026-59346.md): VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability (CVSS 9.3)
- [CVE-2026-59355](https://cve.now/CVE-2026-59355.md): Spring Authorization Server: Open Redirect via request\_uri parameter (CVSS 6.1)
- [CVE-2026-41709](https://cve.now/CVE-2026-41709.md): ESX insufficient logging vulnerability (CVSS 2.7, KEV)
- [CVE-2026-41703](https://cve.now/CVE-2026-41703.md): Out-of-bounds read vulnerability (CVSS 7.6)
- [CVE-2026-47876](https://cve.now/CVE-2026-47876.md): VMXNET3 out-of-bounds write vulnerability (CVSS 9.3)
- [CVE-2026-59309](https://cve.now/CVE-2026-59309.md): vCenter authentication-bypass vulnerability (CVSS 9.8)
- [CVE-2026-59310](https://cve.now/CVE-2026-59310.md): vCenter directory-traversal vulnerability (CVSS 9.8, KEV)
- [CVE-2026-47871](https://cve.now/CVE-2026-47871.md): VMware Avi Load Balancer Directory Traversal Vulnerability (CVSS 8.8)
- [CVE-2026-47870](https://cve.now/CVE-2026-47870.md): VMware Avi Load Balancer Privilege Escalation Vulnerability (CVSS 7.1)
- [CVE-2026-47869](https://cve.now/CVE-2026-47869.md): VMware Avi Load Balancer Remote Code Execution Vulnerability (CVSS 8.7)
- [CVE-2026-47868](https://cve.now/CVE-2026-47868.md): VMware Avi Load Balancer Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2026-47867](https://cve.now/CVE-2026-47867.md): VMware Avi Load Balancer Remote Code Execution Vulnerability (CVSS 8.7)
- [CVE-2026-47866](https://cve.now/CVE-2026-47866.md): VMware Avi Load Balancer Authorization Bypass Vulnerability (CVSS 8.3)
- [CVE-2026-47865](https://cve.now/CVE-2026-47865.md): VMware Avi Load Balancer Authentication Bypass Vulnerability (CVSS 9.8)
- [CVE-2026-59269](https://cve.now/CVE-2026-59269.md): Privilege Escalation via Active Directory LDAP injection in Pinniped Supervisor can be executed by an attacker who can edit LDAP Group DN entries (CVSS 3.8)
- [CVE-2026-41724](https://cve.now/CVE-2026-41724.md): VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 8.0)
- [CVE-2026-41723](https://cve.now/CVE-2026-41723.md): VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 8.0)
- [CVE-2026-41722](https://cve.now/CVE-2026-41722.md): VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 8.0)
- [CVE-2026-41702](https://cve.now/CVE-2026-41702.md): TOCTOU local privilege escalation vulnerability (CVSS 7.8)
- [CVE-2026-41713](https://cve.now/CVE-2026-41713.md): Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor (CVSS 8.2)
- [CVE-2026-41712](https://cve.now/CVE-2026-41712.md): ChatMemory DEFAULT\_CONVERSATION\_ID causes unintended cross-user data leakage (CVSS 7.5)
- [CVE-2026-22745](https://cve.now/CVE-2026-22745.md): CVE-2026-22745 : Denial of service in static resource handling on Windows platforms (CVSS 5.3)
- [CVE-2026-22741](https://cve.now/CVE-2026-22741.md): Static resource cache poisoning in Spring MVC and WebFlux (CVSS 3.1)
- [CVE-2026-22740](https://cve.now/CVE-2026-22740.md): Spring Framework DoS with Multipart Temp Files in WebFlux (CVSS 6.5)
- [CVE-2026-40966](https://cve.now/CVE-2026-40966.md): VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration (CVSS 5.9)
- [CVE-2026-22750](https://cve.now/CVE-2026-22750.md): SSL bundle configuration silently bypassed in Spring Cloud Gateway (CVSS 7.5)
- [CVE-2026-22732](https://cve.now/CVE-2026-22732.md): Under Some Conditions Spring Security HTTP Headers Are not Written (CVSS 9.1)
- [CVE-2026-22729](https://cve.now/CVE-2026-22729.md): CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter (CVSS 8.6)
- [CVE-2026-22730](https://cve.now/CVE-2026-22730.md): CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter (CVSS 8.8)
- [CVE-2026-22717](https://cve.now/CVE-2026-22717.md): VMware Workstation out-of-bound read vulnerability (CVSS 2.7)
- [CVE-2026-22716](https://cve.now/CVE-2026-22716.md): VMware Workstation out-of-bounds write vulnerability (CVSS 5.0)
- [CVE-2026-22722](https://cve.now/CVE-2026-22722.md): VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash (CVSS 6.1)
- [CVE-2026-22715](https://cve.now/CVE-2026-22715.md): VMware Workstation/Fusion NAT vulnerability (CVSS 5.9)
- [CVE-2026-22721](https://cve.now/CVE-2026-22721.md): VMware Aria Operations privilege escalation vulnerability (CVSS 6.2)
- [CVE-2026-22720](https://cve.now/CVE-2026-22720.md): VMware Aria Operations stored cross-site scripting vulnerability (CVSS 8.0)
- [CVE-2026-22719](https://cve.now/CVE-2026-22719.md): VMware Aria Operations command injection vulnerability (CVSS 8.1, KEV)
- [CVE-2026-2818](https://cve.now/CVE-2026-2818.md): Zip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific) (CVSS 8.2)
- [CVE-2026-2817](https://cve.now/CVE-2026-2817.md): Spring Data Geode Insecure Temporary Directory Usage (CVSS 4.4)
- [CVE-2025-41254](https://cve.now/CVE-2025-41254.md): Spring Framework STOMP CSRF Vulnerability (CVSS 4.3)
- [CVE-2025-41253](https://cve.now/CVE-2025-41253.md): Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables (CVSS 7.5)
- [CVE-2025-41252](https://cve.now/CVE-2025-41252.md): Username enumeration vulnerability (CVSS 7.5)
- [CVE-2025-41251](https://cve.now/CVE-2025-41251.md): Weak password recovery vulnerability (CVSS 8.1)
- [CVE-2025-41250](https://cve.now/CVE-2025-41250.md): Header injection vulnerability (CVSS 8.5)
- [CVE-2025-41245](https://cve.now/CVE-2025-41245.md): VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) (CVSS 4.9)
- [CVE-2025-41244](https://cve.now/CVE-2025-41244.md): VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) (CVSS 7.8, KEV)
- [CVE-2025-41246](https://cve.now/CVE-2025-41246.md): Improper authorisation vulnerability (CVSS 7.6)
- [CVE-2025-41249](https://cve.now/CVE-2025-41249.md): CVE-2025-41249: Spring Framework Annotation Detection Vulnerability (CVSS 7.5)
- [CVE-2025-41248](https://cve.now/CVE-2025-41248.md): CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types (CVSS 7.5)
- [CVE-2025-41242](https://cve.now/CVE-2025-41242.md): CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers (CVSS 5.9)
- [CVE-2025-41241](https://cve.now/CVE-2025-41241.md): Denial-of-service vulnerability (CVSS 4.4)
- [CVE-2025-41240](https://cve.now/CVE-2025-41240.md): Mounted Kubernetes Secrets under a predictable path located within the web server document root (CVSS 10.0)
- [CVE-2025-22227](https://cve.now/CVE-2025-22227.md): CVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP Client (CVSS 6.1)
- [CVE-2025-41239](https://cve.now/CVE-2025-41239.md): vSockets information-disclosure vulnerability (CVSS 7.1)
- [CVE-2025-41238](https://cve.now/CVE-2025-41238.md): PVSCSI heap-overflow vulnerability (CVSS 9.3)
- [CVE-2025-41237](https://cve.now/CVE-2025-41237.md): VMCI integer-underflow vulnerability (CVSS 9.3)
- [CVE-2025-41236](https://cve.now/CVE-2025-41236.md): VMXNET3 integer-overflow vulnerability (CVSS 9.3)
- [CVE-2024-38824](https://cve.now/CVE-2024-38824.md): CVE-2024-38824 salt advisory (CVSS 9.6)
- [CVE-2025-22242](https://cve.now/CVE-2025-22242.md): CVE-2025-22242 salt advisory (CVSS 5.6)
- [CVE-2025-22241](https://cve.now/CVE-2025-22241.md): CVE-2025-22241 salt advisory (CVSS 5.6)
- [CVE-2025-22240](https://cve.now/CVE-2025-22240.md): CVE-2025-22240 salt advisory (CVSS 6.3)
- [CVE-2025-22239](https://cve.now/CVE-2025-22239.md): CVE-2025-22239 salt advisory (CVSS 8.1)
- [CVE-2025-22238](https://cve.now/CVE-2025-22238.md): CVE-2025-22238 salt advisory (CVSS 4.2)
- [CVE-2025-22237](https://cve.now/CVE-2025-22237.md): CVE-2025-22237 salt advisory (CVSS 6.7)
- [CVE-2025-22236](https://cve.now/CVE-2025-22236.md): CVE-2025-22236 salt advisory (CVSS 8.1)
- [CVE-2024-38825](https://cve.now/CVE-2024-38825.md): CVE-2024-38825 Salt Advisory (CVSS 6.4)
- [CVE-2024-38823](https://cve.now/CVE-2024-38823.md): CVE-2024-38823 Salt Advisory (CVSS 2.7)
- [CVE-2024-38822](https://cve.now/CVE-2024-38822.md): CVE-2024-38822 Salt Advisory (CVSS 2.7)
- [CVE-2025-41233](https://cve.now/CVE-2025-41233.md): Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. (CVSS 6.8)
- [CVE-2025-41234](https://cve.now/CVE-2025-41234.md): RFD Attack via “Content-Disposition” Header Sourced from Request (CVSS 6.5)
- [CVE-2025-22245](https://cve.now/CVE-2025-22245.md): VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation. (CVSS 5.9)
- [CVE-2025-22244](https://cve.now/CVE-2025-22244.md): VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation. (CVSS 6.9)
- [CVE-2025-22243](https://cve.now/CVE-2025-22243.md): VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation. (CVSS 7.5)
- [CVE-2025-41235](https://cve.now/CVE-2025-41235.md): CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies (CVSS 8.6)
- [CVE-2025-41228](https://cve.now/CVE-2025-41228.md): VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability (CVSS 4.3)
- [CVE-2025-41227](https://cve.now/CVE-2025-41227.md): Denial-of-Service Vulnerability (CVSS 5.5)
- [CVE-2025-41226](https://cve.now/CVE-2025-41226.md): Guest Operations Denial-of-Service Vulnerability (CVSS 6.8)
- [CVE-2025-41225](https://cve.now/CVE-2025-41225.md): VMware vCenter Server authenticated command-execution vulnerability (CVSS 8.8)
- [CVE-2025-41230](https://cve.now/CVE-2025-41230.md): VMware Cloud Foundation Information Disclosure Vulnerability (CVSS 7.5)
- [CVE-2025-41229](https://cve.now/CVE-2025-41229.md): VMware Cloud Foundation Directory Traversal Vulnerability (CVSS 8.2)
- [CVE-2025-22248](https://cve.now/CVE-2025-22248.md): \[pgpool\] Unauthenticated access to postgres through pgpool (CVSS 9.4)
- [CVE-2025-22249](https://cve.now/CVE-2025-22249.md): VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) (CVSS 8.2)
- [CVE-2025-22231](https://cve.now/CVE-2025-22231.md): VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231) (CVSS 7.8)
- [CVE-2025-22224](https://cve.now/CVE-2025-22224.md): VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. (CVSS 9.3, KEV)
- [CVE-2025-22222](https://cve.now/CVE-2025-22222.md): VMware Aria Operations information disclosure vulnerability (CVE-2025-22222) (CVSS 7.7)
- [CVE-2025-22221](https://cve.now/CVE-2025-22221.md): VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22221) (CVSS 5.2)
- [CVE-2025-22220](https://cve.now/CVE-2025-22220.md): VMware Aria Operations for Logs broken access control vulnerability (CVE-2025-22220) (CVSS 4.3)
- [CVE-2025-22219](https://cve.now/CVE-2025-22219.md): VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22219) (CVSS 6.8)
- [CVE-2025-22218](https://cve.now/CVE-2025-22218.md): VMware Aria Operations for Logs information disclosure vulnerability (CVSS 8.5)
- [CVE-2025-22215](https://cve.now/CVE-2025-22215.md): VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215) (CVSS 4.3)
- [CVE-2024-38834](https://cve.now/CVE-2024-38834.md): Stored cross-site scripting vulnerability (CVE-2024-38834) (CVSS 6.5)
- [CVE-2024-38833](https://cve.now/CVE-2024-38833.md): Stored cross-site scripting vulnerability (CVE-2024-38833) (CVSS 6.8)
- [CVE-2024-38832](https://cve.now/CVE-2024-38832.md): Stored cross-site scripting vulnerability (CVE-2024-38832) (CVSS 7.1)
- [CVE-2024-38831](https://cve.now/CVE-2024-38831.md): Local privilege escalation vulnerability (CVE-2024-38831) (CVSS 7.8)
- [CVE-2024-38830](https://cve.now/CVE-2024-38830.md): Local privilege escalation vulnerability (CVSS 7.8)
- [CVE-2024-38820](https://cve.now/CVE-2024-38820.md): CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception (CVSS 3.1)
- [CVE-2024-22280](https://cve.now/CVE-2024-22280.md): VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280) (CVSS 8.5)
- [CVE-2024-22232](https://cve.now/CVE-2024-22232.md): Specially crafted url can be created which leads to a directory traversal in the salt file server (CVSS 7.7)
- [CVE-2024-22231](https://cve.now/CVE-2024-22231.md): Syndic cache directory creation is vulnerable to a directory traversal attack (CVSS 5.0)
- [CVE-2024-22266](https://cve.now/CVE-2024-22266.md): VMware Avi Load Balancer updates address multiple vulnerabilities (CVSS 6.5)
- [CVE-2024-22264](https://cve.now/CVE-2024-22264.md): VMware Avi Load Balancer updates address multiple vulnerabilities (CVSS 7.2)
- [CVE-2024-22250](https://cve.now/CVE-2024-22250.md): Session Hijack Vulnerability in Deprecated EAP Browser Plugin (CVSS 7.8)
- [CVE-2024-22245](https://cve.now/CVE-2024-22245.md): Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin (CVSS 9.6)
- [CVE-2023-34056](https://cve.now/CVE-2023-34056.md): VMware vCenter Server Partial Information Disclosure Vulnerability (CVSS 4.3)
- [CVE-2023-34048](https://cve.now/CVE-2023-34048.md): VMware vCenter Server Out-of-Bounds Write Vulnerability (CVSS 9.8, KEV)
- [CVE-2023-34045](https://cve.now/CVE-2023-34045.md): VMware Fusion installer local privilege escalation (CVSS 6.6)
- [CVE-2023-34046](https://cve.now/CVE-2023-34046.md): VMware Fusion TOCTOU local privilege escalation vulnerability (CVSS 6.7)
- [CVE-2023-34044](https://cve.now/CVE-2023-34044.md): Information disclosure vulnerability in bluetooth device-sharing functionality (CVSS 7.1)
- [CVE-2023-20891](https://cve.now/CVE-2023-20891.md): VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability (CVSS 6.5)
- [CVE-2023-20896](https://cve.now/CVE-2023-20896.md): The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. (CVSS 5.9)
- [CVE-2023-20895](https://cve.now/CVE-2023-20895.md): The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. (CVSS 8.1)
- [CVE-2023-20894](https://cve.now/CVE-2023-20894.md): The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. (CVSS 8.1)
- [CVE-2023-20893](https://cve.now/CVE-2023-20893.md): The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. (CVSS 8.1)
- [CVE-2023-20892](https://cve.now/CVE-2023-20892.md): VMware vCenter Server heap-overflow vulnerability (CVSS 8.1)
- [CVE-2023-20867](https://cve.now/CVE-2023-20867.md): VMware Tools Authentication Bypass Vulnerability (CVSS 3.9, KEV)
- [CVE-2022-22964](https://cve.now/CVE-2022-22964.md): VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation that allows a user to escalate to root due to a vulnera (no CVSS)
- [CVE-2022-22962](https://cve.now/CVE-2022-22962.md): VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the default shared folder l (no CVSS)
- [CVE-2020-3971](https://cve.now/CVE-2020-3971.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before (no CVSS)
- [CVE-2020-3965](https://cve.now/CVE-2020-3965.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS)
- [CVE-2020-3964](https://cve.now/CVE-2020-3964.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS)
- [CVE-2020-3963](https://cve.now/CVE-2020-3963.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS)
- [CVE-2020-3966](https://cve.now/CVE-2020-3966.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS)
- [CVE-2020-3968](https://cve.now/CVE-2020-3968.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS)
- [CVE-2020-3967](https://cve.now/CVE-2020-3967.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS)
- [CVE-2020-3970](https://cve.now/CVE-2020-3970.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS)
- [CVE-2020-3962](https://cve.now/CVE-2020-3962.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS)
- [CVE-2020-3969](https://cve.now/CVE-2020-3969.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS)
- [CVE-2020-3959](https://cve.now/CVE-2020-3959.md): VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (no CVSS)
- [CVE-2020-3958](https://cve.now/CVE-2020-3958.md): VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (no CVSS)
- [CVE-2020-3957](https://cve.now/CVE-2020-3957.md): VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain (no CVSS)
- [CVE-2020-3955](https://cve.now/CVE-2020-3955.md): ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML w (no CVSS)
- [CVE-2020-3946](https://cve.now/CVE-2020-3946.md): InstallBuilder AutoUpdate tool and regular installers enabling \<checkForUpdates\> built with versions earlier than 19.11 are vulnerable to Bi (no CVSS)
- [CVE-2019-5543](https://cve.now/CVE-2019-5543.md): For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstati (no CVSS)
- [CVE-2020-3947](https://cve.now/CVE-2020-3947.md): VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp. (no CVSS)
- [CVE-2020-3948](https://cve.now/CVE-2020-3948.md): Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vuln (no CVSS)
- [CVE-2020-3943](https://cve.now/CVE-2020-3943.md): vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configu (no CVSS)
- [CVE-2020-3944](https://cve.now/CVE-2020-3944.md): vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to (no CVSS)
- [CVE-2020-3945](https://cve.now/CVE-2020-3945.md): vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability due (no CVSS)
- [CVE-2020-3940](https://cve.now/CVE-2020-3940.md): VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability. (no CVSS)
- [CVE-2020-3941](https://cve.now/CVE-2020-3941.md): The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine (no CVSS)
- [CVE-2019-5539](https://cve.now/CVE-2019-5539.md): VMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4) contain a DLL hijacking v (no CVSS)
- [CVE-2019-5542](https://cve.now/CVE-2019-5542.md): VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the RPC handler. (no CVSS)
- [CVE-2019-5541](https://cve.now/CVE-2019-5541.md): VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an out-of-bounds write vulnerability in the e1000e virtual n (no CVSS)
- [CVE-2019-5540](https://cve.now/CVE-2019-5540.md): VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability in vmnetdhcp. (no CVSS)
- [CVE-2019-5533](https://cve.now/CVE-2019-5533.md): In VMware SD-WAN by VeloCloud versions 3.x prior to 3.3.0, the VeloCloud Orchestrator parameter authorization check mistakenly allows enterp (no CVSS)
- [CVE-2019-5521](https://cve.now/CVE-2019-5521.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and (no CVSS)
- [CVE-2019-5531](https://cve.now/CVE-2019-5531.md): VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMware (no CVSS)
- [CVE-2019-5532](https://cve.now/CVE-2019-5532.md): VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability (no CVSS)
- [CVE-2019-5534](https://cve.now/CVE-2019-5534.md): VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability (no CVSS)
- [CVE-2019-5528](https://cve.now/CVE-2019-5528.md): VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. (no CVSS)
- [CVE-2019-5525](https://cve.now/CVE-2019-5525.md): VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. (no CVSS)
- [CVE-2019-5522](https://cve.now/CVE-2019-5522.md): VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows gu (no CVSS)
- [CVE-2019-5517](https://cve.now/CVE-2019-5517.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus (no CVSS)
- [CVE-2019-5520](https://cve.now/CVE-2019-5520.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus (no CVSS)
- [CVE-2019-5516](https://cve.now/CVE-2019-5516.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus (no CVSS)
- [CVE-2019-5515](https://cve.now/CVE-2019-5515.md): VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bo (no CVSS)
- [CVE-2019-5524](https://cve.now/CVE-2019-5524.md): VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual ne (no CVSS)
- [CVE-2019-5518](https://cve.now/CVE-2019-5518.md): VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14. (no CVSS)
- [CVE-2019-5519](https://cve.now/CVE-2019-5519.md): VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14. (no CVSS)
- [CVE-2019-5514](https://cve.now/CVE-2019-5514.md): VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web soc (no CVSS)
- [CVE-2019-5523](https://cve.now/CVE-2019-5523.md): VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerability in the Tenant and (no CVSS)
- [CVE-2018-6982](https://cve.now/CVE-2018-6982.md): VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in th (no CVSS)
- [CVE-2018-6981](https://cve.now/CVE-2018-6981.md): VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, (no CVSS)
- [CVE-2018-6983](https://cve.now/CVE-2018-6983.md): VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer ove (no CVSS)
- [CVE-2018-6980](https://cve.now/CVE-2018-6980.md): VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user r (no CVSS)
- [CVE-2018-6974](https://cve.now/CVE-2018-6974.md): VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x befor (no CVSS)
- [CVE-2018-6977](https://cve.now/CVE-2018-6977.md): VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infi (no CVSS)
- [CVE-2018-6979](https://cve.now/CVE-2018-6979.md): The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9. (no CVSS)
- [CVE-2018-6976](https://cve.now/CVE-2018-6976.md): The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. (no CVSS)
- [CVE-2018-6975](https://cve.now/CVE-2018-6975.md): The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entries in the Agent are n (no CVSS)
- [CVE-2018-6973](https://cve.now/CVE-2018-6973.md): VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. (no CVSS)
- [CVE-2018-6970](https://cve.now/CVE-2018-6970.md): VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-b (no CVSS)
- [CVE-2018-6972](https://cve.now/CVE-2018-6972.md): VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806 (no CVSS)
- [CVE-2018-6971](https://cve.now/CVE-2018-6971.md): VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials (no CVSS)
- [CVE-2018-6969](https://cve.now/CVE-2018-6969.md): VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. (no CVSS)
- [CVE-2018-6967](https://cve.now/CVE-2018-6967.md): VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds re (no CVSS)
- [CVE-2018-6966](https://cve.now/CVE-2018-6966.md): VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds re (no CVSS)
- [CVE-2018-6965](https://cve.now/CVE-2018-6965.md): VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds re (no CVSS)
- [CVE-2018-6968](https://cve.now/CVE-2018-6968.md): The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vuln (no CVSS)
- [CVE-2018-6961](https://cve.now/CVE-2018-6961.md): VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. (CVSS 8.1, KEV)
- [CVE-2018-6964](https://cve.now/CVE-2018-6964.md): VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SU (no CVSS)
- [CVE-2018-6963](https://cve.now/CVE-2018-6963.md): VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to (no CVSS)
- [CVE-2018-6962](https://cve.now/CVE-2018-6962.md): VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation. (no CVSS)
- [CVE-2017-4952](https://cve.now/CVE-2017-4952.md): VMware Xenon 1.x, prior to 1.5.4-CR7\_1, 1.5.7\_7, 1.5.4-CR6\_2, 1.3.7-CR1\_2, 1.1.0-CR0-3, 1.1.0-CR3\_1,1.4.2-CR4\_1, and 1.5.4\_8, contains an au (no CVSS)
- [CVE-2018-6960](https://cve.now/CVE-2018-6960.md): VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authen (no CVSS)
- [CVE-2018-6959](https://cve.now/CVE-2018-6959.md): VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. (no CVSS)
- [CVE-2018-6958](https://cve.now/CVE-2018-6958.md): VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. (no CVSS)
- [CVE-2018-6957](https://cve.now/CVE-2018-6957.md): VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be (no CVSS)
- [CVE-2017-4951](https://cve.now/CVE-2017-4951.md): VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the A (no CVSS)
- [CVE-2017-4947](https://cve.now/CVE-2017-4947.md): VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xeno (no CVSS)
- [CVE-2017-4950](https://cve.now/CVE-2017-4950.md): VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled. (no CVSS)
- [CVE-2017-4949](https://cve.now/CVE-2017-4949.md): VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. (no CVSS)
- [CVE-2017-4948](https://cve.now/CVE-2017-4948.md): VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in T (no CVSS)
- [CVE-2017-4946](https://cve.now/CVE-2017-4946.md): The VMware V4H and V4PA desktop agents (6.x before 6.5.1) contain a privilege escalation vulnerability. (no CVSS)
- [CVE-2017-4945](https://cve.now/CVE-2017-4945.md): VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. (no CVSS)
- [CVE-2017-4943](https://cve.now/CVE-2017-4943.md): VMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation vulnerability via the 'showlog' plugin. (no CVSS)
- [CVE-2017-4941](https://cve.now/CVE-2017-4941.md): VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) con (no CVSS)
- [CVE-2017-4940](https://cve.now/CVE-2017-4940.md): The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) c (no CVSS)
- [CVE-2017-4933](https://cve.now/CVE-2017-4933.md): VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that (no CVSS)
- [CVE-2017-4942](https://cve.now/CVE-2017-4942.md): VMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/vmware
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.