VMware

Records1182All Threatist records

Exploited (KEV)41In CISA KEV

CVSS critical188CVSS 9.0–10.0

CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability HIGH 71KEV 2026-10-28 TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL 100KEV 2026-08-18 TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery CRITICAL 92KEV 2026-03-09 TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability CRITICAL 94KEV 2026-03-03 TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 100KEV 2026-01-23 TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records

Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

58 records in Server · all components

TI-2009-03557 CVE-2009-3733 · GHSA-wfqc-2mvj-wfhf

Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x…

MEDIUM 64

Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.83378 Published 2009-11-02 No fix listed CWE-22

TI-2008-03731 CVE-2008-3892 · GHSA-889x-p8ww-5fp4

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x…

MEDIUM 64

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware P…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.24363 Published 2008-09-03 No fix listed CWE-119

TI-2007-00059 CVE-2007-0063 · GHSA-wpv6-5q5m-qph7

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455…

MEDIUM 62

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 5407…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.20413 Published 2007-09-21 Fixed CWE-191

TI-2009-03556 CVE-2009-3732 · GHSA-mw96-29xv-5ppf

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka…

MEDIUM 59

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.162 Published 2010-04-12 No fix listed CWE-134

TI-2007-00058 CVE-2007-0062 · GHSA-g7fq-vjjh-pwc3

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP…

MEDIUM 53

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Pl…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07618 Published 2007-09-21 No fix listed CWE-119

TI-2007-00057 CVE-2007-0061 · GHSA-xmcp-6wwf-qfhc

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1…

MEDIUM 52

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06496 Published 2007-09-21 No fix listed CWE-119

TI-2010-04034 CVE-2010-4294 · GHSA-2q9v-9rr4-w95c

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder…

MEDIUM 49

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 b…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05844 Published 2010-12-06 No fix listed CWE-94

TI-2009-01481 CVE-2009-1565 · GHSA-jx4p-7rxf-f2v3

vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on…

MEDIUM 49

vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0621 Published 2010-04-12 No fix listed CWE-119

TI-2009-01480 CVE-2009-1564 · GHSA-xgj4-xv99-p98g

Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder…

MEDIUM 49

Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0621 Published 2010-04-12 No fix listed CWE-119

TI-2008-03538 CVE-2008-3696 · GHSA-5m38-jjgp-q23x

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03564 Published 2008-09-03 No fix listed

TI-2008-03537 CVE-2008-3695 · GHSA-p599-g5cv-9wxc

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0356 Published 2008-09-03 No fix listed

TI-2008-03536 CVE-2008-3694 · GHSA-cj86-94wr-xfx8

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0356 Published 2008-09-03 No fix listed

TI-2008-03535 CVE-2008-3693 · GHSA-gw9x-p27g-7vv2

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0356 Published 2008-09-03 No fix listed

TI-2008-03534 CVE-2008-3692 · GHSA-78j9-c89m-gjh9

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0356 Published 2008-09-03 No fix listed

TI-2008-03533 CVE-2008-3691 · GHSA-hh56-whf8-c572

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before…

MEDIUM 49

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03912 Published 2008-09-03 No fix listed

TI-2009-00864 CVE-2009-0909 · GHSA-pwwh-5hg7-cxj9

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2…

MEDIUM 48

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x befor…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04627 Published 2009-04-06 No fix listed CWE-119

TI-2010-01100 CVE-2010-1141 · GHSA-q95x-7x5m-676v

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x…

MEDIUM 43

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.03802 Published 2010-04-12 No fix listed CWE-264

TI-2010-01101 CVE-2010-1142 · GHSA-4p33-j96h-vmj6

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x…

MEDIUM 40

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.01641 Published 2010-04-12 No fix listed CWE-264

TI-2009-00743 CVE-2009-0778 · GHSA-2327-m5w2-rg7f

The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when…

LOW 39

The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situatio…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.04623 Published 2009-03-12 Fixed

TI-2008-01313 CVE-2008-1364 · GHSA-87x3-7r3j-qmpp

Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6…

LOW 38

Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware Player 1.0.x before 1.0.6, VMware ACE 1.0.x before 1.0.5, VMware Server 1.0.x before 1.0.5, and VMware Fusion 1.1.x before 1.…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0204 Published 2008-03-20 No fix listed CWE-399

TI-2010-00655 CVE-2010-0686 · GHSA-398r-4xmm-8gch

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3…

LOW 37

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, rel…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0222 Published 2010-04-01 No fix listed CWE-20

TI-2009-03531 CVE-2009-3707 · GHSA-47pm-rhm6-w3xc

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service…

LOW 36

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 22760…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.11106 Published 2009-10-16 No fix listed CWE-134

TI-2009-00865 CVE-2009-0910 · GHSA-7f62-x26q-v865

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2…

LOW 35

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02811 Published 2009-04-06 No fix listed CWE-119

TI-2008-01289 CVE-2008-1340 · GHSA-77qh-qg3x-6q7q

Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3…

LOW 35

Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) v…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.01736 Published 2008-03-20 No fix listed CWE-399

TI-2009-02162 CVE-2009-2267 · GHSA-r3rg-38gc-7x9q

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3…

LOW 34

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 20313…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.01755 Published 2009-11-02 No fix listed

Open these records in search →