EN
DeutschEnglishEspañolFrançaisItaliano

Start free Dashboard

Exploited vulnerabilities

VMware

26 VMware vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue26
Last 12 months0
In ransomware campaigns9
Last addition4 March 2025

The vulnerabilities26

  1. 4 March 2025CVE-2025-22226ESXi, Workstation, and FusionVMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
  2. 4 March 2025CVE-2025-22225ESXiVMware ESXi Arbitrary Write VulnerabilityRansomware
  3. 4 March 2025CVE-2025-22224ESXi and WorkstationVMware ESXi and Workstation TOCTOU Race Condition Vulnerability
  4. 20 November 2024CVE-2024-38813vCenter ServerVMware vCenter Server Privilege Escalation Vulnerability
  5. 20 November 2024CVE-2024-38812vCenter ServerVMware vCenter Server Heap-Based Buffer Overflow Vulnerability
  6. 30 July 2024CVE-2024-37085ESXiVMware ESXi Authentication Bypass VulnerabilityRansomware
  7. 17 July 2024CVE-2022-22948vCenter ServerVMware vCenter Server Incorrect Default File Permissions Vulnerability
  8. 22 January 2024CVE-2023-34048vCenter ServerVMware vCenter Server Out-of-Bounds Write Vulnerability
  9. 23 June 2023CVE-2023-20867ToolsVMware Tools Authentication Bypass Vulnerability
  10. 22 June 2023CVE-2023-20887Aria Operations for NetworksVmware Aria Operations for Networks Command Injection Vulnerability
  11. 16 May 2022CVE-2022-22947Spring Cloud GatewayVMware Spring Cloud Gateway Code Injection Vulnerability
  12. 15 April 2022CVE-2022-22960Multiple ProductsVMware Multiple Products Privilege Escalation Vulnerability
  13. 14 April 2022CVE-2022-22954Workspace ONE Access and Identity ManagerVMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityRansomware
  14. 4 April 2022CVE-2022-22965Spring FrameworkSpring Framework JDK 9+ Remote Code Execution Vulnerability
  15. 25 March 2022CVE-2018-6961SD-WAN EdgeVMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
  16. 7 March 2022CVE-2021-21973vCenter Server and Cloud FoundationVMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
  17. 18 January 2022CVE-2021-21975vRealize Operations Manager APIVMware Server Side Request Forgery in vRealize Operations Manager APIRansomware
  18. 10 January 2022CVE-2021-22017vCenter ServerVMware vCenter Server Improper Access Control
  19. 3 November 2021CVE-2021-22005vCenter ServerVMware vCenter Server File Upload VulnerabilityRansomware
  20. 3 November 2021CVE-2021-21985vCenter ServerVMware vCenter Server Improper Input Validation VulnerabilityRansomware
  21. 3 November 2021CVE-2021-21972vCenter ServerVMware vCenter Server Remote Code Execution VulnerabilityRansomware
  22. 3 November 2021CVE-2020-4006Multiple ProductsMultiple VMware Products Command Injection Vulnerability
  23. 3 November 2021CVE-2020-3992ESXiVMware ESXi OpenSLP Use-After-Free VulnerabilityRansomware
  24. 3 November 2021CVE-2020-3952vCenter ServerVMware vCenter Server Information Disclosure Vulnerability
  25. 3 November 2021CVE-2020-3950Multiple ProductsVMware Multiple Products Privilege Escalation Vulnerability
  26. 3 November 2021CVE-2019-5544VMware ESXi and Horizon DaaSVMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityRansomware

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, VMware included.

Start freeMy Defence

All vendorsThe catalogue on the CISA website