Vendor
VMware
- CVEs tracked · all time
- 14
- in CISA KEV · all time
- 3
- article · since 11 Sep
- 1
- articles · all time
- 19
One article in the last 45 daysThe latest: SecurityOnline, Thu 8 Oct, 03:26 UTC.See the full timeline
Products: Avi Load Balancer, Cloud Foundation, ESX, ESXi and 11 more
Avi Load BalancerCloud FoundationESXESXiESXi and WorkstationESXi, Workstation, and FusionFusionSpring SecurityTelco Cloud InfrastructureTelco Cloud PlatformvCenterVMware FusionVMware WorkstationvSphere FoundationWorkstation
CVEs
14 CVEsCVE-2025-22224VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityCVSS9.3CriticalExploited1.6%EPSS1article
CVE-2025-22226VMware ESXi, Workstation, and Fusion Information Disclosure VulnerabilityCVSS7.1HighExploited1.8%EPSS1article
CVE-2026-59346VMware Workstation and Fusion VMXNET3 integer-overflow vulnerabilityCVSSUnrated–Not in KEV0.3%EPSS5articles
CVE-2026-59309vCenter authentication-bypass vulnerabilityCVSS9.8Critical–Not in KEV0.6%EPSS5articles
CVE-2026-59347VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerabilityCVSSUnrated–Not in KEV0.2%EPSS4articles
CVE-2026-47865VMware Avi Load Balancer Authentication Bypass VulnerabilityCVSS9.8Critical–Not in KEV0.6%EPSS2articles
CVE-2026-41702TOCTOU local privilege escalation vulnerabilityCVSS7.8High–Not in KEV0.2%EPSS3articles
2 more CVEs
CVE-2026-22721VMware Aria Operations privilege escalation vulnerabilityCVSSUnrated–Not in KEV0.7%EPSS3articles
CVE-2026-22720VMware Aria Operations stored cross-site scripting vulnerabilityCVSSUnrated–Not in KEV0.5%EPSS3articles
- VMware Patches Critical VM Escape Flaw After Public PoC ReleaseSecurityOnline
- Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code ExecutionThe Hacker News
- VMware Fixes Critical Flaws Allowing Guest Code Execution on HostsSecurity Affairs
- Broadcom Patches Critical VMware Flaws Enabling Host Code ExecutionSecurityWeek
- CVE-2026-59346 (CVSS 9.3): VMware Flaw Allows Runnin Code on the HostSecurityOnline
- Patch now: critical VMware vCenter remote code flawsRapid7
- Broadcom patches critical VMware flaws, including admin VM escapeSecurity Affairs
- Broadcom Warns of VMware Flaws Allowing Host Code ExecutionSecurityWeek
- Critical VMware vCenter flaw lets hackers bypass authenticationSecurityOnline
- Broadcom patches Avi Load Balancer auth bypass CVE-2026-47865SecurityOnline
- Broadcom fixes critical VMware Avi LB flaws, CVE-2026-47865SecurityWeek
- SAP issues urgent patch for critical SAML flaw CVE-2026-44748SecurityWeek
- Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation FlawsThe Hacker News
- Broadcom releases VMware Fusion security update for root access bugSecurity Affairs
- Broadcom patches Fusion flaw CVE-2026-41702 stops root accessSecurityWeek
- CISA flags CVE-2026-22719 in Broadcom VMware Aria Operations RCEThe Hacker News
- VMware Aria Operations must be patched after CVE-2026-22719Security Affairs
- Broadcom patches command injection in VMware Aria CVE-2026-22719SecurityWeek
- CVE-2025-22225 in VMware ESXi now used in active ransomware attacksSecurity Affairs · first in our coverage