VMware vulnerabilities
241 CVEs and advisories name VMware as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-41709ESX insufficient logging vulnerability
- CVE-2026-59310vCenter directory-traversal vulnerability
- CVE-2026-22719VMware Aria Operations command injection vulnerability
- CVE-2025-41244VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
- CVE-2025-22224VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.
- CVE-2023-34048VMware vCenter Server Out-of-Bounds Write Vulnerability
- CVE-2023-20867VMware Tools Authentication Bypass Vulnerability
- CVE-2018-6961VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component.