CVEs we hold for Vmware

Records whose assigning authority named Vmware as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-59355Spring Authorization Server: Open Redirect via request_uri parameterVMware Spring Authorization Server

CVE-2026-59354Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadataVMware by Broadcom Spring Security (OAuth2 Authorization…

CVE-2026-59347VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerabilityVMware Fusion

CVE-2026-59346VMware Workstation and Fusion VMXNET3 integer-overflow vulnerabilityVMware Fusion

CVE-2026-59310vCenter directory-traversal vulnerabilityVMware Telco Cloud Platform

CVE-2026-59309vCenter authentication-bypass vulnerabilityVMware Telco Cloud Platform

CVE-2026-59269Privilege Escalation via Active Directory LDAP injection in Pinniped Supervisor can be executed by an attacker who can…VMware Pinniped

CVE-2026-47876VMXNET3 out-of-bounds write vulnerabilityVMware Telco Cloud Platform

CVE-2026-47871VMware Avi Load Balancer Directory Traversal VulnerabilityVMware Avi Load Balancer

CVE-2026-47870VMware Avi Load Balancer Privilege Escalation VulnerabilityVMware Avi Load Balancer

CVE-2026-47869VMware Avi Load Balancer Remote Code Execution VulnerabilityVMware Avi Load Balancer

CVE-2026-47868VMware Avi Load Balancer Local Privilege Escalation VulnerabilityVMware Avi Load Balancer

CVE-2026-47867VMware Avi Load Balancer Remote Code Execution VulnerabilityVMware Avi Load Balancer

CVE-2026-47866VMware Avi Load Balancer Authorization Bypass VulnerabilityVMware Avi Load Balancer

CVE-2026-47865VMware Avi Load Balancer Authentication Bypass VulnerabilityVMware Avi Load Balancer

CVE-2026-41724VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722…VMware Telco Cloud Platform

CVE-2026-41723VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722…VMware Telco Cloud Platform

CVE-2026-41722VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722…VMware Telco Cloud Platform

CVE-2026-41713Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisorVMware Spring AI

CVE-2026-41712ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakageVMware Spring AI

CVE-2026-41709ESX insufficient logging vulnerabilityVMware Telco Cloud Platform

CVE-2026-41703Out-of-bounds read vulnerabilityVMware Telco Cloud Platform

CVE-2026-41702TOCTOU local privilege escalation vulnerabilityVMware Fusion

CVE-2026-40966VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltrationVMware Spring AI

CVE-2026-2818Zip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific)VMware Spring Data Gemfire

CVE-2026-2817Spring Data Geode Insecure Temporary Directory UsageVMware Spring Data Gemfire

CVE-2026-22750SSL bundle configuration silently bypassed in Spring Cloud GatewayVMware Spring Cloud Gateway

CVE-2026-22745CVE-2026-22745 : Denial of service in static resource handling on Windows platformsVMware Spring Framework

CVE-2026-22741Static resource cache poisoning in Spring MVC and WebFluxVMware Spring Framework

CVE-2026-22740Spring Framework DoS with Multipart Temp Files in WebFluxVMware Spring Framework

CVE-2026-22732Under Some Conditions Spring Security HTTP Headers Are not WrittenVMware Spring Security

CVE-2026-22730CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverterVMware Spring AI

CVE-2026-22729CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverterVMware Spring AI

CVE-2026-22722VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crashVMware Workstation

CVE-2026-22721VMware Aria Operations privilege escalation vulnerabilityVMware Telco Cloud Infrastructure

CVE-2026-22720VMware Aria Operations stored cross-site scripting vulnerabilityVMware Telco Cloud Infrastructure

CVE-2026-22719VMware Aria Operations command injection vulnerabilityVMware Telco Cloud Infrastructure

CVE-2026-22717VMware Workstation out-of-bound read vulnerabilityVMware Workstation

CVE-2026-22716VMware Workstation out-of-bounds write vulnerabilityVMware Workstation

CVE-2026-22715VMware Workstation/Fusion NAT vulnerabilityVMware Fusion

CVE-2025-41254Spring Framework STOMP CSRF VulnerabilityVMware Spring Framework

CVE-2025-41253Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment VariablesVMware Spring Cloud Gateway Server Webflux

CVE-2025-41252Username enumeration vulnerabilityVMware NSX

CVE-2025-41251Weak password recovery vulnerabilityvmware NSX

CVE-2025-41250Header injection vulnerabilityVMware vSphere Foundation

CVE-2025-41249CVE-2025-41249: Spring Framework Annotation Detection VulnerabilityVMware Spring Framework

CVE-2025-41248CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized typesVMware Spring Security

CVE-2025-41246Improper authorisation vulnerabilityVMware Tools

CVE-2025-41245VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities…VMware Telco Cloud Infrastructure

CVE-2025-41244VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities…VMware Telco Cloud Infrastructure

CVE-2025-41242CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containersVMware Spring Framework

CVE-2025-41241Denial-of-service vulnerabilityVMware Telco Cloud Infrastructure

CVE-2025-41240Mounted Kubernetes Secrets under a predictable path located within the web server document rootVMware bitnamicharts/wordpress

CVE-2025-41239vSockets information-disclosure vulnerabilityVMware Tools

CVE-2025-41238PVSCSI heap-overflow vulnerabilityVMware Telco Cloud Infrastructure

CVE-2025-41237VMCI integer-underflow vulnerabilityVMware Telco Cloud Infrastructure

CVE-2025-41236VMXNET3 integer-overflow vulnerabilityVMware Telco Cloud Infrastructure

CVE-2025-41235CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted ProxiesVMware Spring Cloud Gateway Server MVC

CVE-2025-41234RFD Attack via “Content-Disposition” Header Sourced from RequestVMware Spring Framework

CVE-2025-41233no title heldVMware Avi Load Balancer

CVE-2025-41231VMware Cloud Foundation Missing Authorisation Vulnerabilityn/a VMware Cloud Foundation

CVE-2025-41230VMware Cloud Foundation Information Disclosure VulnerabilityVMware Cloud Foundation

CVE-2025-41229VMware Cloud Foundation Directory Traversal VulnerabilityVMware Cloud Foundation

CVE-2025-41228VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) VulnerabilityVMware ESXi

CVE-2025-41227Denial-of-Service VulnerabilityVMware Fusion

CVE-2025-41226Guest Operations Denial-of-Service VulnerabilityVMware Telco Cloud Infrastructure

CVE-2025-41225VMware vCenter Server authenticated command-execution vulnerabilityVMware Telco Cloud Infrastructure

CVE-2025-22249VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)VMware Telco Cloud Platform

CVE-2025-22248[pgpool] Unauthenticated access to postgres through pgpoolVMware Bitnami

CVE-2025-22247Insecure file handling vulnerabilityn/a VMware Tools

CVE-2025-22245no title heldVMware NSX

CVE-2025-22244no title heldVMware NSX

CVE-2025-22243no title heldVMware NSX

CVE-2025-22242CVE-2025-22242 salt advisoryVMware SALT

CVE-2025-22241CVE-2025-22241 salt advisoryVMware SALT

CVE-2025-22240CVE-2025-22240 salt advisoryVMware SALT

CVE-2025-22239CVE-2025-22239 salt advisoryVMware SALT

CVE-2025-22238CVE-2025-22238 salt advisoryVMware SALT

CVE-2025-22237CVE-2025-22237 salt advisoryVMware SALT

CVE-2025-22236CVE-2025-22236 salt advisoryVMware SALT

CVE-2025-22231VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)VMware Aria operations

CVE-2025-22230Authentication bypass vulnerabilityn/a VMware Tools

CVE-2025-22227CVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP ClientVMware Reactor Netty

CVE-2025-22225no title heldn/a VMware Telco Cloud Infrastructure

CVE-2025-22224no title heldVMware Telco Cloud Infrastructure

CVE-2025-22222VMware Aria Operations information disclosure vulnerability (CVE-2025-22222)VMware Aria Operations

CVE-2025-22221VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22221)VMware Aria Operations for Logs

CVE-2025-22220VMware Aria Operations for Logs broken access control vulnerability (CVE-2025-22220)VMware Aria Operations for Logs

CVE-2025-22219VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22219)VMware Aria Operations for Logs

CVE-2025-22218VMware Aria Operations for Logs information disclosure vulnerabilityVMware Aria Operations for Logs

CVE-2025-22217no title heldN/A VMware AVI Load Balancer

CVE-2025-22215VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215)VMware Cloud Foundation (VMware Aria Automation)

CVE-2024-38834Stored cross-site scripting vulnerability (CVE-2024-38834)VMware Aria Operations

CVE-2024-38833Stored cross-site scripting vulnerability (CVE-2024-38833)VMware Aria Operations

CVE-2024-38832Stored cross-site scripting vulnerability (CVE-2024-38832)VMware Aria Operations

CVE-2024-38831Local privilege escalation vulnerability (CVE-2024-38831)VMware Aria Operations

CVE-2024-38830Local privilege escalation vulnerabilityVMware Aria Operations

CVE-2024-38825CVE-2024-38825 Salt AdvisoryVMware SALT

CVE-2024-38824CVE-2024-38824 salt advisoryVMware SALT

CVE-2024-38823CVE-2024-38823 Salt AdvisoryVMware SALT

CVE-2024-38822CVE-2024-38822 Salt AdvisoryVMware SALT

CVE-2024-38820CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match ExceptionVMware Spring

CVE-2024-38818no title heldn/a VMware NSX, VMware Cloud Foundation

CVE-2024-38817no title heldn/a VMware NSX, VMware Cloud Foundation

CVE-2024-38815no title heldn/a VMware NSX, VMware Cloud Foundation

CVE-2024-38814no title heldN/A VMware HCX

CVE-2024-38813Privilege escalation vulnerabilityn/a VMware Cloud Foundation

CVE-2024-38812Heap-overflow vulnerabilityn/a VMware Cloud Foundation

CVE-2024-37085no title heldn/a VMware Cloud Foundation

CVE-2024-37081no title heldn/a VMware Cloud Foundation

CVE-2024-37080no title heldn/a VMware Cloud Foundation

CVE-2024-37079no title heldn/a VMware Cloud Foundation

CVE-2024-22280VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280)VMware Aria Automation

CVE-2024-22277no title heldN/A VMware Cloud Director Availability

CVE-2024-22276no title heldN/A VMware Cloud Director Object Storage Extension

CVE-2024-22275no title heldn/a VMware Cloud Foundation (vCenter Server)

CVE-2024-22274no title heldn/a VMware Cloud Foundation (vCenter Server)

CVE-2024-22273no title heldn/a VMware Cloud Foundation (ESXi)

CVE-2024-22272no title heldN/A VMware Cloud Director

CVE-2024-22270no title heldN/A VMware Fusion

CVE-2024-22269no title heldN/A VMware Fusion

CVE-2024-22268no title heldN/A VMware Fusion

CVE-2024-22266VMware Avi Load Balancer updates address multiple vulnerabilitiesVMware Avi Load Balancer

CVE-2024-22264VMware Avi Load Balancer updates address multiple vulnerabilitiesVMware Avi Load Balancer

CVE-2024-22260no title heldN/A VMware Workspace One UEM

CVE-2024-22256no title heldn/a VMware Cloud Director

CVE-2024-22255Information disclosure vulnerabilityn/a VMware Cloud Foundation

CVE-2024-22254Out-of-bounds write vulnerabilityn/a VMware Cloud Foundation

CVE-2024-22253Use-after-free vulnerabilityn/a VMware Cloud Foundation

CVE-2024-22252Use-after-free vulnerabilityn/a VMware Cloud Foundation

CVE-2024-22251Out-of-bounds read vulnerabilityn/a VMware Fusion

CVE-2024-22250Session Hijack Vulnerability in Deprecated EAP Browser PluginVMware Enhanced Authentication Plug-in (EAP)

CVE-2024-22248no title heldN/A VMware SD-WAN Orchestrator

CVE-2024-22247no title heldN/A VMware SD-WAN Edge

CVE-2024-22246no title heldN/A VMware SD-WAN Edge

CVE-2024-22245Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser PluginVMware Enhanced Authentication Plug-in (EAP)

CVE-2024-22241no title heldn/a VMware Aria Operations for Networks

CVE-2024-22240no title heldn/a VMware Aria Operations for Networks

CVE-2024-22239no title heldn/a VMware Aria Operations for Networks

CVE-2024-22238no title heldn/a VMware Aria Operations for Networks

CVE-2024-22237no title heldn/a VMware Aria Operations for Networks

CVE-2024-22235no title heldn/a VMware Aria Operations

CVE-2024-22232Specially crafted url can be created which leads to a directory traversal in the salt file serverVMware Salt Project

CVE-2024-22231Syndic cache directory creation is vulnerable to a directory traversal attackVMware Salt Project

CVE-2023-34064Privilege Escalation Vulnerabilityn/a VMware Workspace ONE Launcher

CVE-2023-34063no title heldN/A VMware Aria Automation, VMware Cloud Foundation

CVE-2023-34060no title heldn/a VMware Cloud Director Appliance (VCD Appliance)

CVE-2023-34058no title heldn/a open-vm-tools

CVE-2023-34057no title heldn/a VMware Tools

CVE-2023-34056VMware vCenter Server Partial Information Disclosure VulnerabilityVMware Cloud Foundation (VMware vCenter Server)

CVE-2023-34052no title heldn/a VMware Aria Operations for Logs

CVE-2023-34051no title heldn/a VMware Aria Operations for Logs

CVE-2023-34048VMware vCenter Server Out-of-Bounds Write VulnerabilityVMware Cloud Foundation (VMware vCenter Server)

CVE-2023-34046VMware Fusion TOCTOU local privilege escalation vulnerabilityVMware Fusion

CVE-2023-34045VMware Fusion installer local privilege escalationVMware Fusion

CVE-2023-34044Information disclosure vulnerability in bluetooth device-sharing functionalityVMware Fusion

CVE-2023-34043no title heldn/a VMware Aria Operations

CVE-2023-34038no title heldn/a VMware Horizon Server

CVE-2023-34037no title heldn/a VMware Horizon Server

CVE-2023-20900no title heldn/a VMware Tools (open-vm-tools)

CVE-2023-20899no title heldn/a VMware SD-WAN (Edge)

CVE-2023-20896no title heldVMware Cloud Foundation (vCenter Server)

CVE-2023-20895no title heldVMware Cloud Foundation (vCenter Server)

CVE-2023-20894no title heldVMware Cloud Foundation (vCenter Server)

CVE-2023-20893no title heldVMware Cloud Foundation (vCenter Server)

CVE-2023-20892VMware vCenter Server heap-overflow vulnerabilityVMware Cloud Foundation (vCenter Server)

CVE-2023-20891VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerabilityVMware Isolation segment

CVE-2023-20886no title heldn/a VMware Workspace ONE UEM Console

CVE-2023-20884no title heldn/a VMware Workspace ONE Access (Access), VMware Identity…

CVE-2023-20880no title heldn/a VMware Aria Operations (formerly vRealize Operations)

CVE-2023-20879no title heldn/a VMware Aria Operations (formerly vRealize Operations)

CVE-2023-20878no title heldn/a VMware Aria Operations (formerly vRealize Operations)

CVE-2023-20877no title heldn/a VMware Aria Operations (formerly vRealize Operations)

CVE-2023-20872no title heldn/a VMware Workstation Pro / Player (Workstation) and…

CVE-2023-20871no title heldn/a VMware Fusion

CVE-2023-20870no title heldn/a VMware Workstation Pro / Player (Workstation) and…

CVE-2023-20869no title heldn/a VMware Workstation Pro / Player (Workstation) and…

CVE-2023-20867VMware Tools Authentication Bypass VulnerabilityVMware Tools

CVE-2023-20865no title heldn/a VMware Aria Operations for Logs (formerly vRealize Log…

CVE-2023-20864no title heldn/a VMware Aria Operations for Logs (formerly vRealize Log…

CVE-2023-20858no title heldn/a VMware Carbon Black App Control

CVE-2023-20857no title heldn/a VMware Workspace ONE Content

CVE-2023-20856no title heldn/a VMware vRealize Operations (vROps)

CVE-2023-20855no title heldn/a VMware vRealize Orchestrator, VMware vRealize…

CVE-2023-20854no title heldn/a VMware Workstation

CVE-2022-31708no title heldn/a VMware vRealize Operations (vROps)

CVE-2022-31707no title heldn/a VMware vRealize Operations (vROps)

CVE-2022-31705no title heldn/a VMware ESXi, VMware Workstation Pro / Player, VMware…

CVE-2022-31702no title heldn/a VMware vRealize Network Insight (vRNI)

CVE-2022-31701no title heldn/a VMware Workspace ONE Access (Access), VMware Identity…

CVE-2022-31700no title heldn/a VMware Workspace ONE Access (Access), VMware Identity…

CVE-2022-31699no title heldn/a VMware ESXi, VMware Cloud Foundation

CVE-2022-31698no title heldn/a VMware vCenter Server, VMware Cloud Foundation

CVE-2022-31697no title heldn/a VMware vCenter Server, VMware Cloud Foundation

CVE-2022-31696no title heldn/a VMware ESXi, VMware Cloud Foundation

CVE-2022-31694no title heldn/a VMware InstallBuilder

CVE-2022-31689no title heldn/a VMware Workspace ONE Assist

CVE-2022-31688no title heldn/a VMware Workspace ONE Assist

CVE-2022-31687no title heldn/a VMware Workspace ONE Assist

CVE-2022-31686no title heldn/a VMware Workspace ONE Assist

200 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.