Read the docs

VMware

Records1182All Threatist records
Exploited (KEV)41In CISA KEV
CVSS critical188CVSS 9.0–10.0
CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV
TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability Priority HIGH 71KEV 2026-10-28TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery Priority CRITICAL 92KEV 2026-03-09TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability Priority CRITICAL 94KEV 2026-03-03TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Priority CRITICAL 100KEV 2026-01-23TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Priority CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records
Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

213 records in Workstation · all components

TI-2025-16135 CVE-2025-22224 · GHSA-j652-46fv-w96g

Time-of-check time-of-use race condition in VMware ESXi

Priority CRITICAL 99KEV

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.01561 Published 2025-03-04 Fixed in ESXi80U3d-24585383, ESXi80U2d-24585300 +2 CWE-367
TI-2025-16137 CVE-2025-22226 · GHSA-37f6-vjg7-8c6c

Out-of-bounds read in ESXi

Priority CRITICAL 88KEV

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.01633 Published 2025-03-04 Fixed in ESXi80U3d-24585383, ESXi80U2d-24585300 +3 CWE-125
TI-2012-03093 CVE-2012-3569 · GHSA-8wg2-73cr-jv3q

Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware…

Priority HIGH 70

Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrar…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.47719 Published 2012-11-14 No fix listed CWE-134
TI-2017-03716 CVE-2017-5753

Observable discrepancy in Intel Most Modern Operating Systems

Priority HIGH 69

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.93838 Published 2018-01-04 Fixed CWE-203
TI-2008-03731 CVE-2008-3892 · GHSA-889x-p8ww-5fp4

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x…

Priority MEDIUM 64

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware P…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.24363 Published 2008-09-03 No fix listed CWE-119
TI-2017-03034 CVE-2017-4901 · GHSA-8xg8-8x73-gmmx

Memory corruption in VMware Workstation Pro/Player

Priority MEDIUM 61

The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability.

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.1994 Published 2017-06-08 Fixed in 12.5.4, 8.5.5. CWE-119
TI-2005-04202 CVE-2005-4459 · GHSA-pqx2-mg4c-9g67

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in…

Priority MEDIUM 58

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execut…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.14235 Published 2005-12-21 No fix listed CWE-119
TI-2007-00058 CVE-2007-0062 · GHSA-g7fq-vjjh-pwc3

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP…

Priority MEDIUM 53

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Pl…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07618 Published 2007-09-21 No fix listed CWE-119
TI-2007-00057 CVE-2007-0061 · GHSA-xmcp-6wwf-qfhc

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1…

Priority MEDIUM 52

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06496 Published 2007-09-21 No fix listed CWE-119
TI-2011-03420 CVE-2011-3868 · GHSA-7jrj-rw38-cw85

Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5…

Priority MEDIUM 49

Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05767 Published 2011-10-07 No fix listed CWE-119
TI-2009-02512 CVE-2009-2628 · GHSA-678r-9fw4-2w76

The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404…

Priority MEDIUM 49

The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 bui…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05568 Published 2009-09-08 No fix listed CWE-94
TI-2024-14840 CVE-2024-22252 · GHSA-4xp8-3mc6-r83c

Use-after-free in VMware ESXi

Priority MEDIUM 48

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.03542 Published 2024-03-05 Fixed in ESXi80U2sb-23305545, ESXi80U1d-23299997 +3 CWE-416
Load more
Open these records in search →