HackZoneLabs News
Newsletter

VMware

26 vulnerabilities in VMware products that CISA lists as exploited.

CVEVendorProductNameAddedFix dueRansomware
CVE-2025-22224VMwareESXi and WorkstationVMware ESXi and Workstation TOCTOU Race Condition Vulnerability4 Mar 202525 Mar 2025Unknown
CVE-2025-22225VMwareESXiVMware ESXi Arbitrary Write Vulnerability4 Mar 202525 Mar 2025Known
CVE-2025-22226VMwareESXi, Workstation, and FusionVMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability4 Mar 202525 Mar 2025Unknown
CVE-2024-38812VMwarevCenter ServerVMware vCenter Server Heap-Based Buffer Overflow Vulnerability20 Nov 202411 Dec 2024Unknown
CVE-2024-38813VMwarevCenter ServerVMware vCenter Server Privilege Escalation Vulnerability20 Nov 202411 Dec 2024Unknown
CVE-2024-37085VMwareESXiVMware ESXi Authentication Bypass Vulnerability30 Jul 202420 Aug 2024Known
CVE-2022-22948VMwarevCenter ServerVMware vCenter Server Incorrect Default File Permissions Vulnerability17 Jul 20247 Aug 2024Unknown
CVE-2023-34048VMwarevCenter ServerVMware vCenter Server Out-of-Bounds Write Vulnerability22 Jan 202412 Feb 2024Unknown
CVE-2023-20867VMwareToolsVMware Tools Authentication Bypass Vulnerability23 Jun 202314 Jul 2023Unknown
CVE-2023-20887VMwareAria Operations for NetworksVmware Aria Operations for Networks Command Injection Vulnerability22 Jun 202313 Jul 2023Unknown
CVE-2022-22947VMwareSpring Cloud GatewayVMware Spring Cloud Gateway Code Injection Vulnerability16 May 20226 Jun 2022Unknown
CVE-2022-22960VMwareMultiple ProductsVMware Multiple Products Privilege Escalation Vulnerability15 Apr 20226 May 2022Unknown
CVE-2022-22954VMwareWorkspace ONE Access and Identity ManagerVMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability14 Apr 20225 May 2022Known
CVE-2022-22965VMwareSpring FrameworkSpring Framework JDK 9+ Remote Code Execution Vulnerability4 Apr 202225 Apr 2022Unknown
CVE-2018-6961VMwareSD-WAN EdgeVMware SD-WAN Edge by VeloCloud Command Injection Vulnerability25 Mar 202215 Apr 2022Unknown
CVE-2021-21973VMwarevCenter Server and Cloud FoundationVMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability7 Mar 202221 Mar 2022Unknown
CVE-2021-21975VMwarevRealize Operations Manager APIVMware Server Side Request Forgery in vRealize Operations Manager API18 Jan 20221 Feb 2022Known
CVE-2021-22017VMwarevCenter ServerVMware vCenter Server Improper Access Control10 Jan 202224 Jan 2022Unknown
CVE-2019-5544VMwareVMware ESXi and Horizon DaaSVMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability3 Nov 20213 May 2022Known
CVE-2020-3950VMwareMultiple ProductsVMware Multiple Products Privilege Escalation Vulnerability3 Nov 20213 May 2022Unknown
CVE-2020-3952VMwarevCenter ServerVMware vCenter Server Information Disclosure Vulnerability3 Nov 20213 May 2022Unknown
CVE-2020-3992VMwareESXiVMware ESXi OpenSLP Use-After-Free Vulnerability3 Nov 20213 May 2022Known
CVE-2020-4006VMwareMultiple ProductsMultiple VMware Products Command Injection Vulnerability3 Nov 20213 May 2022Unknown
CVE-2021-21972VMwarevCenter ServerVMware vCenter Server Remote Code Execution Vulnerability3 Nov 202117 Nov 2021Known
CVE-2021-21985VMwarevCenter ServerVMware vCenter Server Improper Input Validation Vulnerability3 Nov 202117 Nov 2021Known
CVE-2021-22005VMwarevCenter ServerVMware vCenter Server File Upload Vulnerability3 Nov 202117 Nov 2021Known