VMware — security advisories

44 advisories30 exploitedlatest 2026-08-21⚡ RSS feed

Tracked VMware products:

⚡ Watch VMware

Get an email when a new VMware advisory drops — max one per day, one-click unsubscribe.

[NEW] [high] VMware Tanzu Spring Framework: Multiple vulnerabilities

highCVE-2026-47883 CVE-2026-47884 CVE-2026-47885 CVE-2026-47886cert-bund2026-08-21

[NEW] [high] VMware Tanzu Spring Security: Multiple vulnerabilities

highCVE-2026-41707 CVE-2026-47841 CVE-2026-47842 CVE-2026-47877cert-bund2026-08-21

[NEW] [medium] VMware Tanzu Spring Cloud: Multiple vulnerabilities

mediumCVE-2026-47836 CVE-2026-47837 CVE-2026-47879 CVE-2026-47894cert-bund2026-08-21

VMware security advisory (AV26-763) – Update 1

unknownexploitedCVE-2026-59310 CVE-2026-59309 CVE-2026-47876 CVE-2026-41703cccs2026-08-18

VMWare Products Multiple Vulnerabilities

unknownexploitedCVE-2026-41703 CVE-2026-41709 CVE-2026-47876 CVE-2026-59309hkcert2026-08-14

[NEW] [high] VMware Products: Multiple vulnerabilities

highCVE-2026-41703 CVE-2026-41709 CVE-2026-47876 CVE-2026-59309cert-bund2026-08-11

[UPDATE] [medium] VMware Tanzu Spring Security: Multiple vulnerabilities

mediumCVE-2026-40988 CVE-2026-40993 CVE-2026-41003 CVE-2026-41008cert-bund2026-08-10

[UPDATE] [medium] VMware Tanzu Spring Boot: Multiple vulnerabilities

mediumCVE-2026-40992 CVE-2026-41001cert-bund2026-08-10

[UPDATE] [high] VMware Tanzu Spring Framework: Multiple vulnerabilities

highCVE-2026-41838 CVE-2026-41839 CVE-2026-41840 CVE-2026-41841cert-bund2026-08-10

Multiple vulnerabilities in VMware Tanzu Greenplum (August 10, 2026)

unknownCVE-2026-59921 CVE-2026-59901 CVE-2020-13949 CVE-2026-55831cert-fr-avis2026-08-10

CVE-2025-38611: vmci: Prevent the dispatching of uninitialized payloads

mediumCVSS 5.5CVE-2025-38611msrc2026-08-06

CVE-2022-48887: drm/vmwgfx: Remove rcu locks from user resources

mediumCVSS 5.5CVE-2022-48887msrc2026-08-06

Multiple Vulnerabilities in VMware Products (July 30, 2026)

unknownCVE-2026-59309 CVE-2026-47876 CVE-2026-41703 CVE-2026-41709cert-fr-avis2026-07-30

NCSC-2026-0269 [1.01] [M/H] Vulnerabilities fixed in VMware products

unknownCVE-2026-59309 CVE-2026-59310 CVE-2026-47876 CVE-2026-41703ncsc-nl2026-07-29

[UPDATE] [high] VMware Cloud Foundation, vSphere, Aria Operations and Tools: Multiple vulnerabilities

highCVE-2025-41244 CVE-2025-41245 CVE-2025-41246cert-bund2026-07-24

[UPDATE] [high] VMware Tanzu Spring Security: Multiple vulnerabilities

highCVE-2026-22746 CVE-2026-22747 CVE-2026-22748 CVE-2026-22751cert-bund2026-07-16

CVE-2021-22054: Omnissa Workspace ONE Server-Side Request Forgery

criticalexploitedCVE-2021-22054cisa-kev2026-03-09

CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability

criticalexploitedCVE-2025-22225cisa-kev2025-03-04

CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

criticalexploitedCVE-2025-22226cisa-kev2025-03-04

CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

criticalexploitedCVE-2025-22224cisa-kev2025-03-04

CVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerability

criticalexploitedCVE-2024-38813cisa-kev2024-11-20

CVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2024-38812cisa-kev2024-11-20

CVE-2024-37085: VMware ESXi Authentication Bypass Vulnerability

criticalexploitedCVE-2024-37085cisa-kev2024-07-30

CVE-2022-22948: VMware vCenter Server Incorrect Default File Permissions Vulnerability

criticalexploitedCVE-2022-22948cisa-kev2024-07-17

CVE-2023-34048: VMware vCenter Server Out-of-Bounds Write Vulnerability

criticalexploitedCVE-2023-34048cisa-kev2024-01-22

CVE-2023-20867: VMware Tools Authentication Bypass Vulnerability

criticalexploitedCVE-2023-20867cisa-kev2023-06-23

CVE-2023-20887: Vmware Aria Operations for Networks Command Injection Vulnerability

criticalexploitedCVE-2023-20887cisa-kev2023-06-22

CVE-2022-22963: VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

criticalexploitedCVE-2022-22963cisa-kev2022-08-25

CVE-2022-22947: VMware Spring Cloud Gateway Code Injection Vulnerability

criticalexploitedCVE-2022-22947cisa-kev2022-05-16

CVE-2022-22960: VMware Multiple Products Privilege Escalation Vulnerability

criticalexploitedCVE-2022-22960cisa-kev2022-04-15

CVE-2022-22954: VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

criticalexploitedCVE-2022-22954cisa-kev2022-04-14

CVE-2018-1273: VMware Tanzu Spring Data Commons Property Binder Vulnerability

criticalexploitedCVE-2018-1273cisa-kev2022-03-25

CVE-2018-6961: VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

criticalexploitedCVE-2018-6961cisa-kev2022-03-25

CVE-2021-21973: VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

criticalexploitedCVE-2021-21973cisa-kev2022-03-07

CVE-2021-21975: VMware Server Side Request Forgery in vRealize Operations Manager API

criticalexploitedCVE-2021-21975cisa-kev2022-01-18

CVE-2021-22017: VMware vCenter Server Improper Access Control

criticalexploitedCVE-2021-22017cisa-kev2022-01-10

CVE-2020-3950: VMware Multiple Products Privilege Escalation Vulnerability

criticalexploitedCVE-2020-3950cisa-kev2021-11-03

CVE-2020-4006: Multiple VMware Products Command Injection Vulnerability

criticalexploitedCVE-2020-4006cisa-kev2021-11-03

CVE-2021-22005: VMware vCenter Server File Upload Vulnerability

criticalexploitedCVE-2021-22005cisa-kev2021-11-03

CVE-2021-21972: VMware vCenter Server Remote Code Execution Vulnerability

criticalexploitedCVE-2021-21972cisa-kev2021-11-03

CVE-2021-21985: VMware vCenter Server Improper Input Validation Vulnerability

criticalexploitedCVE-2021-21985cisa-kev2021-11-03

CVE-2020-3992: VMware ESXi OpenSLP Use-After-Free Vulnerability

criticalexploitedCVE-2020-3992cisa-kev2021-11-03

CVE-2020-3952: VMware vCenter Server Information Disclosure Vulnerability

criticalexploitedCVE-2020-3952cisa-kev2021-11-03

CVE-2019-5544: VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2019-5544cisa-kev2021-11-03