VMware — Vulnerabilities & Security Advisories 241

Browse all 241 CVE security advisories affecting VMware. AI-powered Chinese analysis, POCs, and references for each vulnerability.

VMware operates as a leading provider of cloud computing and virtualization platforms, enabling enterprises to manage data centers and deploy software-defined infrastructure. With 219 recorded CVEs, its attack surface reflects the complexity of managing hypervisors and management interfaces. Historically, vulnerabilities have frequently involved remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation or authentication bypasses in web-based management consoles. Notable incidents include critical flaws in vCenter Server and ESXi that allowed attackers to gain unauthorized administrative access or execute arbitrary commands on host systems. These exploits underscore the risks associated with centralized management tools, where a single compromise can impact entire virtualized environments. The high volume of vulnerabilities highlights the necessity for rigorous patch management and secure configuration practices to mitigate potential breaches in enterprise infrastructure.

Found 8 results / 241 Clear Filters

Top products by VMware: Workstation ESXi VMware ESXi SALT VMware Aria Operations Avi Load Balancer Cloud Foundation Spring Framework Workstation Pro/Player vCenter Server VMware vCenter Server (vCenter Server) Spring AI Fusion VCF operations VMware Aria Operations for Logs VMware Workstation Airwatch Console VMware vCenter Server vRealize Automation VMware Tools VMware NSX VMware ESXi, Workstation, and Fusion VMware Aria Automation Workstation and Fusion vRealize Operations for Horizon Adapter Salt Project VMware Fusion Spring Security vSphere Data Protection (VDP) VMware Enhanced Authentication Plug-in (EAP)

CVE ID	Title	CVSS	Severity	Published
CVE-2026-41709	ESX insufficient logging vulnerability — Cloud Foundation CWE-778	2.7	Low	2026-07-30
CVE-2026-41703	Out-of-bounds read vulnerability — Cloud Foundation CWE-125	7.6	High	2026-07-30
CVE-2026-47876	VMXNET3 out-of-bounds write vulnerability — Cloud Foundation CWE-787	9.3	Critical	2026-07-30
CVE-2026-59309	vCenter authentication-bypass vulnerability — Cloud Foundation CWE-303	9.8	Critical	2026-07-30
CVE-2026-59310	vCenter directory-traversal vulnerability — Cloud Foundation CWE-22	9.8	Critical	2026-07-30
CVE-2025-41237	VMCI integer-underflow vulnerability — Cloud Foundation CWE-787	9.3	Critical	2025-07-15
CVE-2025-41230	VMware Cloud Foundation Information Disclosure Vulnerability — Cloud Foundation CWE-200	7.5	High	2025-05-20
CVE-2025-41229	VMware Cloud Foundation Directory Traversal Vulnerability — Cloud Foundation CWE-22	8.2	High	2025-05-20

This page lists every published CVE security advisory associated with VMware. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.