Skip to content
THREATWIRE

CVE Tracker · Vendor

VMware CVEs

29 CVEs in the tracker, 26 in the CISA KEV catalogue.

All vendors · RSS feed for VMware · Tracker data last updated 18 Oct 2026.

Showing 29 of 29

  1. CVE-2026-106122CVSS 7.5 highEPSS 0.48%2026-10-06

    rabbitmq java client. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbi…

  2. CVE-2026-106121CVSS 7.5 highEPSS 0.50%2026-10-06

    rabbitmq java client. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbi…

  3. CVE-2023-34048CVSS 9.8 criticalEPSS 99.4%KEV2023-10-25

    vCenter Server. VMware vCenter Server Out-of-Bounds Write Vulnerability

  4. CVE-2023-20887CVSS 9.8 criticalEPSS 98.3%KEV2023-06-07

    Aria Operations for Networks. Vmware Aria Operations for Networks Command Injection Vulnerability

  5. CVE-2022-22954CVSS 9.8 criticalEPSS 100%KEV2022-04-11

    Workspace ONE Access and Identity Manager. VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

  6. CVE-2022-22965CVSS 9.8 criticalEPSS 100%KEV2022-04-01

    Spring Framework. Spring Framework JDK 9+ Remote Code Execution Vulnerability

  7. CVE-2022-22947CVSS 10.0 criticalEPSS 98.3%KEV2022-03-03

    Spring Cloud Gateway. VMware Spring Cloud Gateway Code Injection Vulnerability

  8. CVE-2021-22005CVSS 9.8 criticalEPSS 100%KEV2021-09-23

    vCenter Server. VMware vCenter Server File Upload Vulnerability

  9. CVE-2021-21985CVSS 9.8 criticalEPSS 100%KEV2021-05-26

    vCenter Server. VMware vCenter Server Improper Input Validation Vulnerability

  10. CVE-2021-21978CVSS 9.8 criticalEPSS 99.0%2021-03-03

    view planner. VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Imprope…

  11. CVE-2021-21972CVSS 9.8 criticalEPSS 100%KEV2021-02-24

    vCenter Server. VMware vCenter Server Remote Code Execution Vulnerability

  12. CVE-2025-22226No CVSSEPSS 1.77%KEV

    ESXi, Workstation, and Fusion. VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

  13. CVE-2025-22225No CVSSEPSS 1.02%KEV

    ESXi. VMware ESXi Arbitrary Write Vulnerability

  14. CVE-2025-22224No CVSSEPSS 1.56%KEV

    ESXi and Workstation. VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

  15. CVE-2024-38813No CVSSEPSS 17.4%KEV

    vCenter Server. VMware vCenter Server Privilege Escalation Vulnerability

  16. CVE-2024-38812No CVSSEPSS 54.6%KEV

    vCenter Server. VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

  17. CVE-2024-37085No CVSSEPSS 26.8%KEV

    ESXi. VMware ESXi Authentication Bypass Vulnerability

  18. CVE-2023-20867No CVSSEPSS 13.5%KEV

    Tools. VMware Tools Authentication Bypass Vulnerability

  19. CVE-2022-22960No CVSSEPSS 35.5%KEV

    Multiple Products. VMware Multiple Products Privilege Escalation Vulnerability

  20. CVE-2022-22948No CVSSEPSS 13.3%KEV

    vCenter Server. VMware vCenter Server Incorrect Default File Permissions Vulnerability

  21. CVE-2021-22017No CVSSEPSS 49.2%KEV

    vCenter Server. VMware vCenter Server Improper Access Control

  22. CVE-2021-21975No CVSSEPSS 78.0%KEV

    vRealize Operations Manager API. VMware Server Side Request Forgery in vRealize Operations Manager API

  23. CVE-2021-21973No CVSSEPSS 88.0%KEV

    vCenter Server and Cloud Foundation. VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

  24. CVE-2020-4006No CVSSEPSS 17.3%KEV

    Multiple Products. Multiple VMware Products Command Injection Vulnerability

  25. CVE-2020-3992No CVSSEPSS 83.0%KEV

    ESXi. VMware ESXi OpenSLP Use-After-Free Vulnerability

  26. CVE-2020-3952No CVSSEPSS 90.4%KEV

    vCenter Server. VMware vCenter Server Information Disclosure Vulnerability

  27. CVE-2020-3950No CVSSEPSS 7.25%KEV

    Multiple Products. VMware Multiple Products Privilege Escalation Vulnerability

  28. CVE-2019-5544No CVSSEPSS 97.3%KEV

    VMware ESXi and Horizon DaaS. VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

  29. CVE-2018-6961No CVSSEPSS 86.3%KEV

    SD-WAN Edge. VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability