VMware
VMware known exploited vulnerabilities
Every VMware vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first. 9 of them are known to be used by ransomware.
26 CVEs
- CVE-2025-22226VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability · added March 4, 2025
- CVE-2025-22225 ransomwareVMware ESXi Arbitrary Write Vulnerability · added March 4, 2025
- CVE-2025-22224VMware ESXi and Workstation TOCTOU Race Condition Vulnerability · added March 4, 2025
- CVE-2024-38813VMware vCenter Server Privilege Escalation Vulnerability · added November 20, 2024
- CVE-2024-38812VMware vCenter Server Heap-Based Buffer Overflow Vulnerability · added November 20, 2024
- CVE-2024-37085 ransomwareVMware ESXi Authentication Bypass Vulnerability · added July 30, 2024
- CVE-2022-22948VMware vCenter Server Incorrect Default File Permissions Vulnerability · added July 17, 2024
- CVE-2023-34048VMware vCenter Server Out-of-Bounds Write Vulnerability · added January 22, 2024
- CVE-2023-20867VMware Tools Authentication Bypass Vulnerability · added June 23, 2023
- CVE-2023-20887Vmware Aria Operations for Networks Command Injection Vulnerability · added June 22, 2023
- CVE-2022-22947VMware Spring Cloud Gateway Code Injection Vulnerability · added May 16, 2022
- CVE-2022-22960VMware Multiple Products Privilege Escalation Vulnerability · added April 15, 2022
- CVE-2022-22954 ransomwareVMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability · added April 14, 2022
- CVE-2022-22965Spring Framework JDK 9+ Remote Code Execution Vulnerability · added April 4, 2022
- CVE-2018-6961VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability · added March 25, 2022
- CVE-2021-21973VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability · added March 7, 2022
- CVE-2021-21975 ransomwareVMware Server Side Request Forgery in vRealize Operations Manager API · added January 18, 2022
- CVE-2021-22017VMware vCenter Server Improper Access Control · added January 10, 2022
- CVE-2021-22005 ransomwareVMware vCenter Server File Upload Vulnerability · added November 3, 2021
- CVE-2021-21985 ransomwareVMware vCenter Server Improper Input Validation Vulnerability · added November 3, 2021
- CVE-2021-21972 ransomwareVMware vCenter Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-4006Multiple VMware Products Command Injection Vulnerability · added November 3, 2021
- CVE-2020-3992 ransomwareVMware ESXi OpenSLP Use-After-Free Vulnerability · added November 3, 2021
- CVE-2020-3952VMware vCenter Server Information Disclosure Vulnerability · added November 3, 2021
- CVE-2020-3950VMware Multiple Products Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2019-5544 ransomwareVMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).