Log in Start free

VMWare

Products

ProductCVEsExploitedLatest
Telco Cloud Platform174Jul 30, 2026
Telco Cloud Infrastructure143Jul 30, 2026
Cloud Foundation172Jul 30, 2026
VMware Aria Operations152Jun 8, 2026
vSphere Foundation72Jul 30, 2026
VMware Cloud Foundation52Feb 25, 2026
VMware Tools22Sep 29, 2025
Workstation241Jul 30, 2026
ESXi91Jul 15, 2025
VMware Telco Cloud Platform81Jun 8, 2026
VMware Telco Cloud Infrastructure41Feb 25, 2026
vCenter41Jul 30, 2026
VCF operations41Jun 8, 2026
ESX31Jul 30, 2026
VMware vCenter Server21Oct 25, 2023
VMware Cloud Foundation (VMware vCenter Server)21Oct 25, 2023
VMware Cloud Foundation Operations21Feb 25, 2026
NSX SD-WAN by VeloCloud11Jun 11, 2018
Fusion23–Jul 30, 2026
VMware ESXi12–Jun 25, 2020
SALT11–Jun 13, 2025
Avi Load Balancer8–Jul 18, 2026
Spring Framework7–Apr 29, 2026
VMware vCenter Server (vCenter Server)5–Jun 22, 2023
VMware Fusion5–Oct 7, 2026
Spring AI5–May 12, 2026
VMware Cloud Foundation (vCenter Server)5–Jun 22, 2023
VMware Workstation4–Oct 7, 2026
VMware Aria Operations for Logs4–Jan 30, 2025
VMware Aria Automation3–May 13, 2025
vRealize Operations for Horizon Adapter3–Feb 19, 2020
VMware NSX3–Jun 4, 2025
NSX2–Sep 29, 2025
VMware Enhanced Authentication Plug-in (EAP)2–Feb 20, 2024
VMware Horizon Agent for Linux2–Apr 11, 2022
Tools2–Sep 29, 2025
Spring Data Geode2–Feb 20, 2026
vCenter Server2–May 20, 2025
VMware Avi Load Balancer2–May 8, 2024
Salt Project2–Jun 27, 2024
Spring Security2–Mar 19, 2026
Spring Data Gemfire2–Feb 20, 2026
Spring Cloud Gateway2–Apr 10, 2026
Bitnami1–May 13, 2025
Spring Cloud Gateway Server MVC1–May 30, 2025
Spring Authorization Server1–Aug 27, 2026
Spring1–Oct 18, 2024
Reactor Netty1–Jul 16, 2025
VMware Cloud Foundation (VMware Aria Automation)1–Jan 8, 2025
Pinniped1–Jul 9, 2026
VMware Horizon Client for Mac1–May 29, 2020
VMware Remote Console for Mac1–May 29, 2020
VMware Tanzu Application Service for VMs1–Jul 26, 2023
Isolation segment1–Jul 26, 2023
InstallBuilder1–Apr 20, 2020
bitnamicharts/wordpress1–Jul 24, 2025
VMware Tools for Windows (VMware Tools)1–Jan 15, 2020
bitnamicharts/drupal1–Jul 24, 2025
bitnamicharts/appsmith1–Jul 24, 2025
Workspace ONE SDK1–Jan 17, 2020
Spring Cloud Gateway Server Webflux1–Oct 16, 2025

Exploited and recent CVEs

  • CVE-2026-41709 Low 2.7 Exploited ESX insufficient logging vulnerability 0.7%
  • CVE-2026-41709 Low 2.7 Exploited ESX insufficient logging vulnerability 0.7%
  • CVE-2026-41709 Low 2.7 Exploited ESX insufficient logging vulnerability 0.7%
  • CVE-2026-41709 Low 2.7 Exploited ESX insufficient logging vulnerability 0.7%
  • CVE-2026-59310 Critical 9.8 Exploited vCenter directory-traversal vulnerability 2.6%
  • CVE-2026-59310 Critical 9.8 Exploited vCenter directory-traversal vulnerability 2.6%
  • CVE-2026-59310 Critical 9.8 Exploited vCenter directory-traversal vulnerability 2.6%
  • CVE-2026-59310 Critical 9.8 Exploited vCenter directory-traversal vulnerability 2.6%
  • CVE-2026-59310 Critical 9.8 Exploited vCenter directory-traversal vulnerability 2.6%
  • CVE-2026-22719 High 8.1 Exploited VMware Aria Operations command injection vulnerability 18.3%
  • CVE-2026-22719 High 8.1 Exploited VMware Aria Operations command injection vulnerability 18.3%
  • CVE-2026-22719 High 8.1 Exploited VMware Aria Operations command injection vulnerability 18.3%
  • CVE-2026-22719 High 8.1 Exploited VMware Aria Operations command injection vulnerability 18.3%
  • CVE-2025-41244 High 7.8 Exploited VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) 8.6%
  • CVE-2025-41244 High 7.8 Exploited VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) 8.6%
  • CVE-2025-41244 High 7.8 Exploited VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) 8.6%
  • CVE-2025-41244 High 7.8 Exploited VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) 8.6%
  • CVE-2025-41244 High 7.8 Exploited VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) 8.6%
  • CVE-2025-41244 High 7.8 Exploited VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) 8.6%
  • CVE-2025-22224 Critical 9.3 Exploited VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machin 1.6%
  • CVE-2025-22224 Critical 9.3 Exploited VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machin 1.6%
  • CVE-2025-22224 Critical 9.3 Exploited VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machin 1.6%
  • CVE-2025-22224 Critical 9.3 Exploited VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machin 1.6%
  • CVE-2025-22224 Critical 9.3 Exploited VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machin 1.6%
  • CVE-2023-34048 Critical 9.8 Exploited VMware vCenter Server Out-of-Bounds Write Vulnerability 99.2%
  • CVE-2023-34048 Critical 9.8 Exploited VMware vCenter Server Out-of-Bounds Write Vulnerability 99.2%
  • CVE-2023-20867 Low 3.9 Exploited VMware Tools Authentication Bypass Vulnerability 13.6%
  • CVE-2018-6961 High 8.1 Exploited VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on 85.3%
  • CVE-2026-59347 High 8.1 VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability 0.2%
  • CVE-2026-59347 High 8.1 VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability 0.2%