netVigilance Vulnerability intelligence since 2004

VMware

26 VMware vulnerabilities with confirmed exploitation in the wild, as published by CISA; 26 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for VMware
Vulnerability Status
overdue 534d2025-03-25 CVE-2025-22226 VMware / ESXi, Workstation, and Fusion VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability 2025-03-04 6.0 past due
overdue 534d2025-03-25 CVE-2025-22225 VMware / ESXi VMware ESXi Arbitrary Write Vulnerability 2025-03-04 8.2 past dueransomware
overdue 534d2025-03-25 CVE-2025-22224 VMware / ESXi and Workstation VMware ESXi and Workstation TOCTOU Race Condition Vulnerability 2025-03-04 8.2 past due
overdue 638d2024-12-11 CVE-2024-38813 VMware / vCenter Server VMware vCenter Server Privilege Escalation Vulnerability 2024-11-20 9.8 past due
overdue 638d2024-12-11 CVE-2024-38812 VMware / vCenter Server VMware vCenter Server Heap-Based Buffer Overflow Vulnerability 2024-11-20 9.8 past due
overdue 751d2024-08-20 CVE-2024-37085 VMware / ESXi VMware ESXi Authentication Bypass Vulnerability 2024-07-30 7.2 past dueransomware
overdue 764d2024-08-07 CVE-2022-22948 VMware / vCenter Server VMware vCenter Server Incorrect Default File Permissions Vulnerability 2024-07-17 6.5 past due
overdue 941d2024-02-12 CVE-2023-34048 VMware / vCenter Server VMware vCenter Server Out-of-Bounds Write Vulnerability 2024-01-22 9.8 past due
overdue 1154d2023-07-14 CVE-2023-20867 VMware / Tools VMware Tools Authentication Bypass Vulnerability 2023-06-23 3.9 past due
overdue 1155d2023-07-13 CVE-2023-20887 VMware / Aria Operations for Networks Vmware Aria Operations for Networks Command Injection Vulnerability 2023-06-22 9.8 past due
overdue 1557d2022-06-06 CVE-2022-22947 VMware / Spring Cloud Gateway VMware Spring Cloud Gateway Code Injection Vulnerability 2022-05-16 10.0 past due
overdue 1588d2022-05-06 CVE-2022-22960 VMware / Multiple Products VMware Multiple Products Privilege Escalation Vulnerability 2022-04-15 7.8 past due
overdue 1589d2022-05-05 CVE-2022-22954 VMware / Workspace ONE Access and Identity Manager VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability 2022-04-14 9.8 past dueransomware
overdue 1599d2022-04-25 CVE-2022-22965 VMware / Spring Framework Spring Framework JDK 9+ Remote Code Execution Vulnerability 2022-04-04 9.8 past due
overdue 1609d2022-04-15 CVE-2018-6961 VMware / SD-WAN Edge VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability 2022-03-25 8.1 past due
overdue 1634d2022-03-21 CVE-2021-21973 VMware / vCenter Server and Cloud Foundation VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability 2022-03-07 5.3 past due
overdue 1682d2022-02-01 CVE-2021-21975 VMware / vRealize Operations Manager API VMware Server Side Request Forgery in vRealize Operations Manager API 2022-01-18 7.5 past dueransomware
overdue 1690d2022-01-24 CVE-2021-22017 VMware / vCenter Server VMware vCenter Server Improper Access Control 2022-01-10 5.3 past due
overdue 1758d2021-11-17 CVE-2021-22005 VMware / vCenter Server VMware vCenter Server File Upload Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1758d2021-11-17 CVE-2021-21985 VMware / vCenter Server VMware vCenter Server Improper Input Validation Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1758d2021-11-17 CVE-2021-21972 VMware / vCenter Server VMware vCenter Server Remote Code Execution Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1591d2022-05-03 CVE-2020-4006 VMware / Multiple Products Multiple VMware Products Command Injection Vulnerability 2021-11-03 9.1 past due
overdue 1591d2022-05-03 CVE-2020-3992 VMware / ESXi VMware ESXi OpenSLP Use-After-Free Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1591d2022-05-03 CVE-2020-3952 VMware / vCenter Server VMware vCenter Server Information Disclosure Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2020-3950 VMware / Multiple Products VMware Multiple Products Privilege Escalation Vulnerability 2021-11-03 7.8 past due
overdue 1591d2022-05-03 CVE-2019-5544 VMware / VMware ESXi and Horizon DaaS VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability 2021-11-03 9.8 past dueransomware