VMware

Records1182All Threatist records

Exploited (KEV)41In CISA KEV

CVSS critical188CVSS 9.0–10.0

CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability HIGH 71KEV 2026-10-28 TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL 100KEV 2026-08-18 TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery CRITICAL 92KEV 2026-03-09 TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability CRITICAL 94KEV 2026-03-03 TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 100KEV 2026-01-23 TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records

Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

44 records in Ace · all components

TI-2008-03731 CVE-2008-3892 · GHSA-889x-p8ww-5fp4

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x…

MEDIUM 64

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware P…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.24363 Published 2008-09-03 No fix listed CWE-119

TI-2007-00059 CVE-2007-0063 · GHSA-wpv6-5q5m-qph7

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455…

MEDIUM 62

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 5407…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.20413 Published 2007-09-21 Fixed CWE-191

TI-2009-03556 CVE-2009-3732 · GHSA-mw96-29xv-5ppf

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka…

MEDIUM 59

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.162 Published 2010-04-12 No fix listed CWE-134

TI-2005-04202 CVE-2005-4459 · GHSA-pqx2-mg4c-9g67

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in…

MEDIUM 58

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execut…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.14235 Published 2005-12-21 No fix listed CWE-119

TI-2007-00058 CVE-2007-0062 · GHSA-g7fq-vjjh-pwc3

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP…

MEDIUM 53

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Pl…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07618 Published 2007-09-21 No fix listed CWE-119

TI-2007-00057 CVE-2007-0061 · GHSA-xmcp-6wwf-qfhc

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1…

MEDIUM 52

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06496 Published 2007-09-21 No fix listed CWE-119

TI-2009-02512 CVE-2009-2628 · GHSA-678r-9fw4-2w76

The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404…

MEDIUM 49

The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 bui…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05568 Published 2009-09-08 No fix listed CWE-94

TI-2008-03538 CVE-2008-3696 · GHSA-5m38-jjgp-q23x

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03564 Published 2008-09-03 No fix listed

TI-2008-03537 CVE-2008-3695 · GHSA-p599-g5cv-9wxc

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0356 Published 2008-09-03 No fix listed

TI-2008-03536 CVE-2008-3694 · GHSA-cj86-94wr-xfx8

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0356 Published 2008-09-03 No fix listed

TI-2008-03535 CVE-2008-3693 · GHSA-gw9x-p27g-7vv2

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0356 Published 2008-09-03 No fix listed

TI-2008-03534 CVE-2008-3692 · GHSA-78j9-c89m-gjh9

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0356 Published 2008-09-03 No fix listed

TI-2008-03533 CVE-2008-3691 · GHSA-hh56-whf8-c572

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03912 Published 2008-09-03 No fix listed

TI-2009-00864 CVE-2009-0909 · GHSA-pwwh-5hg7-cxj9

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2…

MEDIUM 48

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x befor…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04627 Published 2009-04-06 No fix listed CWE-119

TI-2009-00186 CVE-2009-0199 · GHSA-jqhc-vmcp-q22q

Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder…

MEDIUM 48

Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMw…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05024 Published 2009-09-08 No fix listed CWE-119

TI-2008-01339 CVE-2008-1392 · GHSA-74vx-v5xg-4w53

The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3…

MEDIUM 48

The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown i…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02734 Published 2008-03-20 No fix listed CWE-16

TI-2010-01100 CVE-2010-1141 · GHSA-q95x-7x5m-676v

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x…

MEDIUM 43

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.03802 Published 2010-04-12 No fix listed CWE-264

TI-2007-04843 CVE-2007-5025 · GHSA-h9w4-j6rm-hfwg

Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to…

MEDIUM 42

Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulation of "images stored in virtual machines downloaded by the user."

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01157 Published 2007-09-21 No fix listed

TI-2010-01101 CVE-2010-1142 · GHSA-4p33-j96h-vmj6

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x…

MEDIUM 40

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.01641 Published 2010-04-12 No fix listed CWE-264

TI-2008-01313 CVE-2008-1364 · GHSA-87x3-7r3j-qmpp

Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6…

LOW 38

Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware Player 1.0.x before 1.0.6, VMware ACE 1.0.x before 1.0.5, VMware Server 1.0.x before 1.0.5, and VMware Fusion 1.1.x before 1.…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0204 Published 2008-03-20 No fix listed CWE-399

TI-2009-03531 CVE-2009-3707 · GHSA-47pm-rhm6-w3xc

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service…

LOW 36

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 22760…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.11106 Published 2009-10-16 No fix listed CWE-134

TI-2009-00865 CVE-2009-0910 · GHSA-7f62-x26q-v865

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2…

LOW 35

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02811 Published 2009-04-06 No fix listed CWE-119

TI-2008-01289 CVE-2008-1340 · GHSA-77qh-qg3x-6q7q

Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3…

LOW 35

Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) v…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.01736 Published 2008-03-20 No fix listed CWE-399

TI-2009-02162 CVE-2009-2267 · GHSA-r3rg-38gc-7x9q

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3…

LOW 34

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 20313…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.01755 Published 2009-11-02 No fix listed

TI-2009-01179 CVE-2009-1244 · GHSA-3pp9-5q74-pq79

Unspecified vulnerability in the virtual machine display function in VMware Workstation…

LOW 34

Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.…

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.02272 Published 2009-04-13 No fix listed

Open these records in search →

Critical	188
High	460
Medium	480
Low	54
No CVSS	0