VMware vulnerabilities

Newest addition to KEV first.

• CVE-2026-41709

  ESX insufficient logging vulnerability

  VMware · Cloud Foundation

  ExploitedLow2.7
• CVE-2026-59310

  vCenter directory-traversal vulnerability

  VMware · Cloud Foundation

  ExploitedCritical9.8
• CVE-2026-22719

  VMware Aria Operations command injection vulnerability

  VMware · VMware Aria Operations

  ExploitedHigh8.1
• CVE-2025-41244

  VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

  VMware · VCF operations

  ExploitedHigh7.8
• CVE-2025-22224

  VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local…

  VMware · ESXi

  ExploitedCritical9.3
• CVE-2023-34048

  VMware vCenter Server Out-of-Bounds Write Vulnerability

  VMware · VMware vCenter Server

  ExploitedCritical9.8
• CVE-2023-20867

  VMware Tools Authentication Bypass Vulnerability

  VMware · VMware Tools

  ExploitedLow3.9
• CVE-2018-6961

  VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled…

  VMware · NSX SD-WAN by VeloCloud

  ExploitedHigh8.1