Vendor: vmware

26 advisories • Updated 2026-04-11

VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

2025-03-04 CVE-2025-22224

highVMware CVE 2025-W10

VMware ESXi Arbitrary Write Vulnerability

2025-03-04 CVE-2025-22225

criticalVMware CVE 2025-W10

VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

2025-03-04 CVE-2025-22226

highVMware CVE 2025-W10

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

2024-11-20 CVE-2024-38812

highVMware CVE 2024-W47

VMware vCenter Server Privilege Escalation Vulnerability

2024-11-20 CVE-2024-38813

highVMware CVE 2024-W47

VMware ESXi Authentication Bypass Vulnerability

2024-07-30 CVE-2024-37085

criticalVMware CVE 2024-W31

VMware vCenter Server Incorrect Default File Permissions Vulnerability

2024-07-17 CVE-2022-22948

highVMware CVE 2024-W29

VMware vCenter Server Out-of-Bounds Write Vulnerability

2024-01-22 CVE-2023-34048

highVMware CVE 2024-W04

VMware Tools Authentication Bypass Vulnerability

2023-06-23 CVE-2023-20867

highVMware CVE 2023-W25

Vmware Aria Operations for Networks Command Injection Vulnerability

2023-06-22 CVE-2023-20887

highVMware CVE 2023-W25

VMware Spring Cloud Gateway Code Injection Vulnerability

2022-05-16 CVE-2022-22947

highVMware CVE 2022-W20

VMware Multiple Products Privilege Escalation Vulnerability

2022-04-15 CVE-2022-22960

highVMware CVE 2022-W15

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

2022-04-14 CVE-2022-22954

criticalVMware CVE 2022-W15

Spring Framework JDK 9+ Remote Code Execution Vulnerability

2022-04-04 CVE-2022-22965

highVMware CVE 2022-W14

VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

2022-03-25 CVE-2018-6961

highVMware CVE 2022-W12

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

2022-03-07 CVE-2021-21973

highVMware CVE 2022-W10

VMware Server Side Request Forgery in vRealize Operations Manager API

2022-01-18 CVE-2021-21975

criticalVMware CVE 2022-W03

VMware vCenter Server Improper Access Control

2022-01-10 CVE-2021-22017

highVMware CVE 2022-W02

Multiple VMware Products Command Injection Vulnerability

2021-11-03 CVE-2020-4006

highVMware CVE 2021-W44

VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

2021-11-03 CVE-2019-5544

criticalVMware CVE 2021-W44

VMware ESXi OpenSLP Use-After-Free Vulnerability

2021-11-03 CVE-2020-3992

criticalVMware CVE 2021-W44

VMware Multiple Products Privilege Escalation Vulnerability

2021-11-03 CVE-2020-3950

highVMware CVE 2021-W44

VMware vCenter Server File Upload Vulnerability

2021-11-03 CVE-2021-22005

criticalVMware CVE 2021-W44

VMware vCenter Server Improper Input Validation Vulnerability

2021-11-03 CVE-2021-21985

criticalVMware CVE 2021-W44

VMware vCenter Server Information Disclosure Vulnerability

2021-11-03 CVE-2020-3952

highVMware CVE 2021-W44

VMware vCenter Server Remote Code Execution Vulnerability

2021-11-03 CVE-2021-21972

criticalVMware CVE 2021-W44