VMware

Records1182All Threatist records

Exploited (KEV)41In CISA KEV

CVSS critical188CVSS 9.0–10.0

CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability HIGH 71KEV 2026-10-28 TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL 100KEV 2026-08-18 TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery CRITICAL 92KEV 2026-03-09 TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability CRITICAL 94KEV 2026-03-03 TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 100KEV 2026-01-23 TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records

Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

15 records in Vmware Workstation · all components

TI-2007-00058 CVE-2007-0062 · GHSA-g7fq-vjjh-pwc3

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP…

MEDIUM 53

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Pl…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07618 Published 2007-09-21 No fix listed CWE-119

TI-2008-01339 CVE-2008-1392 · GHSA-74vx-v5xg-4w53

The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3…

MEDIUM 48

The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown i…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02734 Published 2008-03-20 No fix listed CWE-16

TI-2008-01313 CVE-2008-1364 · GHSA-87x3-7r3j-qmpp

Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6…

LOW 38

Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware Player 1.0.x before 1.0.6, VMware ACE 1.0.x before 1.0.5, VMware Server 1.0.x before 1.0.5, and VMware Fusion 1.1.x before 1.…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0204 Published 2008-03-20 No fix listed CWE-399

TI-2008-01289 CVE-2008-1340 · GHSA-77qh-qg3x-6q7q

Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3…

LOW 35

Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) v…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.01736 Published 2008-03-20 No fix listed CWE-399

TI-2009-00166 CVE-2009-0177 · GHSA-mxv5-rp33-2rv9

vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware…

LOW 34

vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier;…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08642 Published 2009-01-20 No fix listed CWE-399

TI-2008-01311 CVE-2008-1362 · GHSA-3wg9-7hfj-6cp9

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before…

LOW 32

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.0036 Published 2008-03-20 No fix listed CWE-264

TI-2008-02019 CVE-2008-2099 · GHSA-5xrc-w5gp-hjw5

Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057…

LOW 31

Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE 2 before 2.0.2 build 93057 on Windows allows guest OS users to execute arbitrar…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00405 Published 2008-06-02 No fix listed CWE-119

TI-2008-02018 CVE-2008-2098 · GHSA-2vrm-6v48-2rqp

Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware…

LOW 31

Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, VMware ACE 2 before 2.0.2 build 93057, and VMware Fusion…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00462 Published 2008-06-02 No fix listed CWE-119

TI-2008-00887 CVE-2008-0923 · GHSA-jph2-4993-v6wc

Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and…

LOW 31

Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00486 Published 2008-02-26 No fix listed CWE-22

TI-2008-01310 CVE-2008-1361 · GHSA-gv98-9r75-xrjg

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before…

LOW 30

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.00347 Published 2008-03-20 No fix listed CWE-264

TI-2008-00927 CVE-2008-0967 · GHSA-w7jw-whgf-5mgf

Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before…

LOW 30

Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VM…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00356 Published 2008-06-05 No fix listed

TI-2008-03603 CVE-2008-3761 · GHSA-cqgj-ggx7-phrm

hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier…

LOW 24

hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 uses the METHOD_NEIT…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00995 Published 2008-08-21 No fix listed CWE-20

TI-2008-04673 CVE-2008-4916 · GHSA-m34f-92c4-4h99

Unspecified vulnerability in a guest virtual device driver in VMware Workstation before…

LOW 21

Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and earlier 2.x versions;…

CVSS 2.0MEDIUM 4.6 Local Low privileges Interaction — EPSS 0.00334 Published 2009-04-06 No fix listed

TI-2007-05447 CVE-2007-5671 · GHSA-rcvp-7793-9q23

HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404…

LOW 21

HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00388 Published 2008-06-05 No fix listed CWE-20

TI-2007-05224 CVE-2007-5438 · GHSA-3x3h-397m-6f9w

Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware…

LOW 11

Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 10800…

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00366 Published 2007-10-13 No fix listed CWE-20

Open these records in search →

Critical	188
High	460
Medium	480
Low	54
No CVSS	0