Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Vendor

VMware (Broadcom)

31 known exploitedOfficial security advisories

VMware (Broadcom) news

No recent coverage.

Actively exploited

All 31 →
CVE-2026-59310RansomwareCVSS 9.8

Broadcom VMware vCenter

Broadcom VMware vCenter Path Traversal Vulnerability

Added Aug 18, 2026Fed. due Aug 21, 2026
CVE-2026-22719CVSS 8.1

Broadcom VMware Aria Operations

Broadcom VMware Aria Operations Command Injection Vulnerability

Added Mar 3, 2026Fed. due Mar 24, 2026
CVE-2024-37079CVSS 9.8

Broadcom VMware vCenter Server

Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

Added Jan 23, 2026Fed. due Feb 13, 2026
CVE-2025-41244CVSS 7.8

Broadcom VMware Aria Operations and VMware Tools

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Added Oct 30, 2025Fed. due Nov 20, 2025
CVE-2025-1976CVSS 8.6

Broadcom Brocade Fabric OS

Broadcom Brocade Fabric OS Code Injection Vulnerability

Added Apr 28, 2025Fed. due May 19, 2025
CVE-2025-22224CVSS 8.2

VMware ESXi and Workstation

VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

Added Mar 4, 2025Fed. due Mar 25, 2025
CVE-2025-22225RansomwareCVSS 8.2

VMware ESXi

VMware ESXi Arbitrary Write Vulnerability

Added Mar 4, 2025Fed. due Mar 25, 2025
CVE-2025-22226CVSS 6.0

VMware ESXi, Workstation, and Fusion

VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

Added Mar 4, 2025Fed. due Mar 25, 2025
CVE-2024-38812CVSS 9.8

VMware vCenter Server

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

Added Nov 20, 2024Fed. due Dec 11, 2024
CVE-2024-38813CVSS 9.8

VMware vCenter Server

VMware vCenter Server Privilege Escalation Vulnerability

Added Nov 20, 2024Fed. due Dec 11, 2024
CVE-2024-37085RansomwareCVSS 7.2

VMware ESXi

VMware ESXi Authentication Bypass Vulnerability

Added Jul 30, 2024Fed. due Aug 20, 2024
CVE-2022-22948CVSS 6.5

VMware vCenter Server

VMware vCenter Server Incorrect Default File Permissions Vulnerability

Added Jul 17, 2024Fed. due Aug 7, 2024
CVE-2023-34048CVSS 9.8

VMware vCenter Server

VMware vCenter Server Out-of-Bounds Write Vulnerability

Added Jan 22, 2024Fed. due Feb 12, 2024
CVE-2023-20867CVSS 3.9

VMware Tools

VMware Tools Authentication Bypass Vulnerability

Added Jun 23, 2023Fed. due Jul 14, 2023
CVE-2023-20887CVSS 9.8

VMware Aria Operations for Networks

Vmware Aria Operations for Networks Command Injection Vulnerability

Added Jun 22, 2023Fed. due Jul 13, 2023
CVE-2022-22947CVSS 10.0

VMware Spring Cloud Gateway

VMware Spring Cloud Gateway Code Injection Vulnerability

Added May 16, 2022Fed. due Jun 6, 2022
CVE-2022-22960CVSS 7.8

VMware Multiple Products

VMware Multiple Products Privilege Escalation Vulnerability

Added Apr 15, 2022Fed. due May 6, 2022
CVE-2022-22954RansomwareCVSS 9.8

VMware Workspace ONE Access and Identity Manager

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

Added Apr 14, 2022Fed. due May 5, 2022
CVE-2022-22965CVSS 9.8

VMware Spring Framework

Spring Framework JDK 9+ Remote Code Execution Vulnerability

Added Apr 4, 2022Fed. due Apr 25, 2022
CVE-2018-6961CVSS 8.1

VMware SD-WAN Edge

VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

Added Mar 25, 2022Fed. due Apr 15, 2022

Products

vCenter Server · 9 KEVMultiple Products · 3 KEVvSphere / ESXi / vCenter · 3 KEVAria Operations for Networks · 1 KEVBrocade Fabric OS · 1 KEVESXi and Workstation · 1 KEVESXi, Workstation, and Fusion · 1 KEVSD-WAN Edge · 1 KEVSpring Cloud Gateway · 1 KEVSpring Framework · 1 KEVTools · 1 KEVvCenter Server and Cloud Foundation · 1 KEVVMware Aria Operations · 1 KEVVMware Aria Operations and VMware Tools · 1 KEVVMware ESXi and Horizon DaaS · 1 KEVVMware vCenter · 1 KEVVMware vCenter Server · 1 KEVvRealize Operations Manager API · 1 KEVWorkspace ONE Access and Identity Manager · 1 KEV