VMware vulnerabilities
241 CVEs and advisories name VMware as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-38834Stored cross-site scripting vulnerability (CVE-2024-38834)
- CVE-2024-38833Stored cross-site scripting vulnerability (CVE-2024-38833)
- CVE-2024-38832Stored cross-site scripting vulnerability (CVE-2024-38832)
- CVE-2024-38831Local privilege escalation vulnerability (CVE-2024-38831)
- CVE-2024-38830Local privilege escalation vulnerability
- CVE-2024-38820CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception
- CVE-2024-22280VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280)
- CVE-2024-22232Specially crafted url can be created which leads to a directory traversal in the salt file server
- CVE-2024-22231Syndic cache directory creation is vulnerable to a directory traversal attack
- CVE-2024-22266VMware Avi Load Balancer updates address multiple vulnerabilities
- CVE-2024-22264VMware Avi Load Balancer updates address multiple vulnerabilities
- CVE-2024-22250Session Hijack Vulnerability in Deprecated EAP Browser Plugin
- CVE-2024-22245Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin
- CVE-2023-34056VMware vCenter Server Partial Information Disclosure Vulnerability
- CVE-2023-34048VMware vCenter Server Out-of-Bounds Write Vulnerability
- CVE-2023-34045VMware Fusion installer local privilege escalation
- CVE-2023-34046VMware Fusion TOCTOU local privilege escalation vulnerability
- CVE-2023-34044Information disclosure vulnerability in bluetooth device-sharing functionality
- CVE-2023-20891VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability
- CVE-2023-20896The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol.
- CVE-2023-20895The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol.
- CVE-2023-20894The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol.
- CVE-2023-20893The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol.
- CVE-2023-20892VMware vCenter Server heap-overflow vulnerability
- CVE-2023-20867VMware Tools Authentication Bypass Vulnerability
- CVE-2022-22964VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation that allows a user to escalate to root due to a vulnera
- CVE-2022-22962VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the default shared folder l
- CVE-2020-3971VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before
- CVE-2020-3965VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be
- CVE-2020-3964VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be