VMware — security advisories

28 advisories28 exploitedlatest 2026-03-09⚡ RSS feed

Tracked VMware products:

Workspace ONE UEM ESXi and Workstation ESXi ESXi, Workstation, and Fusion vCenter Server vRealize Operations Manager VMware Tools Aria Operations for Networks Tanzu Spring Cloud Function Spring Cloud Gateway Workspace ONE Access, Identity Manager, vRealize Automation Workspace ONE Access, Identity Manager SD-WAN Edge by VeloCloud Tanzu Spring Data Commons ESXi and Horizon DaaS Workspace One Access, Access Connector, Identity Manager, Identity Manager Connector

⚡ Watch VMware

Get an email when a new VMware advisory drops — max one per day, one-click unsubscribe.

CVE-2021-22054: Omnissa Workspace ONE Server-Side Request Forgery

criticalexploitedCVE-2021-22054cisa-kev2026-03-09

CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

criticalexploitedCVE-2025-22224cisa-kev2025-03-04

CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability

criticalexploitedCVE-2025-22225cisa-kev2025-03-04

CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

criticalexploitedCVE-2025-22226cisa-kev2025-03-04

CVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2024-38812cisa-kev2024-11-20

CVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerability

criticalexploitedCVE-2024-38813cisa-kev2024-11-20

CVE-2024-37085: VMware ESXi Authentication Bypass Vulnerability

criticalexploitedCVE-2024-37085cisa-kev2024-07-30

CVE-2022-22948: VMware vCenter Server Incorrect Default File Permissions Vulnerability

criticalexploitedCVE-2022-22948cisa-kev2024-07-17

CVE-2023-34048: VMware vCenter Server Out-of-Bounds Write Vulnerability

criticalexploitedCVE-2023-34048cisa-kev2024-01-22

CVE-2023-20867: VMware Tools Authentication Bypass Vulnerability

criticalexploitedCVE-2023-20867cisa-kev2023-06-23

CVE-2023-20887: Vmware Aria Operations for Networks Command Injection Vulnerability

criticalexploitedCVE-2023-20887cisa-kev2023-06-22

CVE-2022-22963: VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

criticalexploitedCVE-2022-22963cisa-kev2022-08-25

CVE-2022-22947: VMware Spring Cloud Gateway Code Injection Vulnerability

criticalexploitedCVE-2022-22947cisa-kev2022-05-16

CVE-2022-22960: VMware Multiple Products Privilege Escalation Vulnerability

criticalexploitedCVE-2022-22960cisa-kev2022-04-15

CVE-2022-22954: VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

criticalexploitedCVE-2022-22954cisa-kev2022-04-14

CVE-2018-6961: VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

criticalexploitedCVE-2018-6961cisa-kev2022-03-25

CVE-2018-1273: VMware Tanzu Spring Data Commons Property Binder Vulnerability

criticalexploitedCVE-2018-1273cisa-kev2022-03-25

CVE-2021-21973: VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

criticalexploitedCVE-2021-21973cisa-kev2022-03-07

CVE-2021-21975: VMware Server Side Request Forgery in vRealize Operations Manager API

criticalexploitedCVE-2021-21975cisa-kev2022-01-18

CVE-2021-22017: VMware vCenter Server Improper Access Control

criticalexploitedCVE-2021-22017cisa-kev2022-01-10

CVE-2021-22005: VMware vCenter Server File Upload Vulnerability

criticalexploitedCVE-2021-22005cisa-kev2021-11-03

CVE-2020-4006: Multiple VMware Products Command Injection Vulnerability

criticalexploitedCVE-2020-4006cisa-kev2021-11-03

CVE-2020-3952: VMware vCenter Server Information Disclosure Vulnerability

criticalexploitedCVE-2020-3952cisa-kev2021-11-03

CVE-2020-3950: VMware Multiple Products Privilege Escalation Vulnerability

criticalexploitedCVE-2020-3950cisa-kev2021-11-03

CVE-2019-5544: VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2019-5544cisa-kev2021-11-03

CVE-2020-3992: VMware ESXi OpenSLP Use-After-Free Vulnerability

criticalexploitedCVE-2020-3992cisa-kev2021-11-03

CVE-2021-21985: VMware vCenter Server Improper Input Validation Vulnerability

criticalexploitedCVE-2021-21985cisa-kev2021-11-03

CVE-2021-21972: VMware vCenter Server Remote Code Execution Vulnerability

criticalexploitedCVE-2021-21972cisa-kev2021-11-03