Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
26 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Mar 4, 2025 | CVE-2025-22226 | VMware · ESXi, Workstation, and Fusion | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability | High 7.1 | 1.6% | Mar 25, 2025 |
| Mar 4, 2025 | CVE-2025-22225 Ransomware | VMware · ESXi | VMware ESXi Arbitrary Write Vulnerability | High 8.2 | 1.0% | Mar 25, 2025 |
| Mar 4, 2025 | CVE-2025-22224 | VMware · ESXi and Workstation | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability | Critical 9.3 | 1.6% | Mar 25, 2025 |
| Nov 20, 2024 | CVE-2024-38813 | VMware · vCenter Server | VMware vCenter Server Privilege Escalation Vulnerability | High 7.5 | 17.4% | Dec 11, 2024 |
| Nov 20, 2024 | CVE-2024-38812 | VMware · vCenter Server | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | Critical 9.8 | 54.6% | Dec 11, 2024 |
| Jul 30, 2024 | CVE-2024-37085 Ransomware | VMware · ESXi | VMware ESXi Authentication Bypass Vulnerability | Medium 6.8 | 26.8% | Aug 20, 2024 |
| Jul 17, 2024 | CVE-2022-22948 | VMware · vCenter Server | VMware vCenter Server Incorrect Default File Permissions Vulnerability | Medium 6.5 | 13.3% | Aug 7, 2024 |
| Jan 22, 2024 | CVE-2023-34048 | VMware · vCenter Server | VMware vCenter Server Out-of-Bounds Write Vulnerability | Critical 9.8 | 99.2% | Feb 12, 2024 |
| Jun 23, 2023 | CVE-2023-20867 | VMware · Tools | VMware Tools Authentication Bypass Vulnerability | Low 3.9 | 13.6% | Jul 14, 2023 |
| Jun 22, 2023 | CVE-2023-20887 | VMware · Aria Operations for Networks | Vmware Aria Operations for Networks Command Injection Vulnerability | Critical 9.8 | 98.3% | Jul 13, 2023 |
| May 16, 2022 | CVE-2022-22947 | VMware · Spring Cloud Gateway | VMware Spring Cloud Gateway Code Injection Vulnerability | Critical 10.0 | 98.3% | Jun 6, 2022 |
| Apr 15, 2022 | CVE-2022-22960 | VMware · Multiple Products | VMware Multiple Products Privilege Escalation Vulnerability | High 7.8 | 35.5% | May 6, 2022 |
| Apr 14, 2022 | CVE-2022-22954 Ransomware | VMware · Workspace ONE Access and Identity Manager | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | Critical 9.8 | 100.0% | May 5, 2022 |
| Apr 4, 2022 | CVE-2022-22965 | VMware · Spring Framework | Spring Framework JDK 9+ Remote Code Execution Vulnerability | Critical 9.8 | 99.6% | Apr 25, 2022 |
| Mar 25, 2022 | CVE-2018-6961 | VMware · SD-WAN Edge | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | High 8.1 | 85.3% | Apr 15, 2022 |
| Mar 7, 2022 | CVE-2021-21973 | VMware · vCenter Server and Cloud Foundation | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability | Medium 5.3 | 88.0% | Mar 21, 2022 |
| Jan 18, 2022 | CVE-2021-21975 Ransomware | VMware · vRealize Operations Manager API | VMware Server Side Request Forgery in vRealize Operations Manager API | Critical 9.8 | 78.0% | Feb 1, 2022 |
| Jan 10, 2022 | CVE-2021-22017 | VMware · vCenter Server | VMware vCenter Server Improper Access Control | Medium 5.3 | 49.2% | Jan 24, 2022 |
| Nov 3, 2021 | CVE-2021-22005 Ransomware | VMware · vCenter Server | VMware vCenter Server File Upload Vulnerability | Critical 9.8 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-21985 Ransomware | VMware · vCenter Server | VMware vCenter Server Improper Input Validation Vulnerability | Critical 9.8 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-21972 Ransomware | VMware · vCenter Server | VMware vCenter Server Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2020-4006 | VMware · Multiple Products | Multiple VMware Products Command Injection Vulnerability | Critical 9.1 | 17.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3992 Ransomware | VMware · ESXi | VMware ESXi OpenSLP Use-After-Free Vulnerability | Critical 9.8 | 83.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3952 | VMware · vCenter Server | VMware vCenter Server Information Disclosure Vulnerability | Critical 9.8 | 90.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3950 | VMware · Multiple Products | VMware Multiple Products Privilege Escalation Vulnerability | High 7.8 | 7.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-5544 Ransomware | VMware · VMware ESXi and Horizon DaaS | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability | Critical 9.8 | 98.1% | May 3, 2022 |