VMware: known exploited vulnerabilities
26Catalog entries
9Ransomware use
2025-03-04Last added
2025-03-25Latest due date
Get an email when VMware is next added.Watch VMware
| CVE | Product / vulnerability | Due |
|---|---|---|
| CVE-2025-22224 | ESXi and Workstation VMware ESXi and Workstation TOCTOU Race Condition Vulnerability |
2025-03-25 |
| CVE-2025-22225 | ESXi RANSOMWARE VMware ESXi Arbitrary Write Vulnerability |
2025-03-25 |
| CVE-2025-22226 | ESXi, Workstation, and Fusion VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability |
2025-03-25 |
| CVE-2024-38812 | vCenter Server VMware vCenter Server Heap-Based Buffer Overflow Vulnerability |
2024-12-11 |
| CVE-2024-38813 | vCenter Server VMware vCenter Server Privilege Escalation Vulnerability |
2024-12-11 |
| CVE-2024-37085 | ESXi RANSOMWARE VMware ESXi Authentication Bypass Vulnerability |
2024-08-20 |
| CVE-2022-22948 | vCenter Server VMware vCenter Server Incorrect Default File Permissions Vulnerability |
2024-08-07 |
| CVE-2023-34048 | vCenter Server VMware vCenter Server Out-of-Bounds Write Vulnerability |
2024-02-12 |
| CVE-2023-20867 | Tools VMware Tools Authentication Bypass Vulnerability |
2023-07-14 |
| CVE-2023-20887 | Aria Operations for Networks Vmware Aria Operations for Networks Command Injection Vulnerability |
2023-07-13 |
| CVE-2022-22947 | Spring Cloud Gateway VMware Spring Cloud Gateway Code Injection Vulnerability |
2022-06-06 |
| CVE-2022-22960 | Multiple Products VMware Multiple Products Privilege Escalation Vulnerability |
2022-05-06 |
| CVE-2022-22954 | Workspace ONE Access and Identity Manager RANSOMWARE VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability |
2022-05-05 |
| CVE-2022-22965 | Spring Framework Spring Framework JDK 9+ Remote Code Execution Vulnerability |
2022-04-25 |
| CVE-2018-6961 | SD-WAN Edge VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability |
2022-04-15 |
| CVE-2021-21973 | vCenter Server and Cloud Foundation VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability |
2022-03-21 |
| CVE-2021-21975 | vRealize Operations Manager API RANSOMWARE VMware Server Side Request Forgery in vRealize Operations Manager API |
2022-02-01 |
| CVE-2021-22017 | vCenter Server VMware vCenter Server Improper Access Control |
2022-01-24 |
| CVE-2020-4006 | Multiple Products Multiple VMware Products Command Injection Vulnerability |
2022-05-03 |
| CVE-2021-21985 | vCenter Server RANSOMWARE VMware vCenter Server Improper Input Validation Vulnerability |
2021-11-17 |
| CVE-2021-21972 | vCenter Server RANSOMWARE VMware vCenter Server Remote Code Execution Vulnerability |
2021-11-17 |
| CVE-2020-3952 | vCenter Server VMware vCenter Server Information Disclosure Vulnerability |
2022-05-03 |
| CVE-2021-22005 | vCenter Server RANSOMWARE VMware vCenter Server File Upload Vulnerability |
2021-11-17 |
| CVE-2020-3950 | Multiple Products VMware Multiple Products Privilege Escalation Vulnerability |
2022-05-03 |
| CVE-2020-3992 | ESXi RANSOMWARE VMware ESXi OpenSLP Use-After-Free Vulnerability |
2022-05-03 |
| CVE-2019-5544 | VMware ESXi and Horizon DaaS RANSOMWARE VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability |
2022-05-03 |