VMware vulnerabilities

8 advisories tracked, 8 actively exploited. Last update: March 4, 2025.

By product: ESXi (4) · Workstation / Fusion (2) · vCenter Server (4)

Running VMware devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on VMware alerts

CVE-2025-22224March 4, 2025Critical 9.3Exploited
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVE-2025-22225March 4, 2025High 8.2Exploited
VMware ESXi Arbitrary Write Vulnerability
CVE-2025-22226March 4, 2025High 7.1Exploited
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
CVE-2024-38812November 20, 2024Critical 9.8Exploited
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
CVE-2024-38813November 20, 2024High 7.5Exploited
VMware vCenter Server Privilege Escalation Vulnerability
CVE-2024-37085July 30, 2024Medium 6.8Exploited
VMware ESXi Authentication Bypass Vulnerability
CVE-2022-22948July 17, 2024Medium 6.5Exploited
VMware vCenter Server Incorrect Default File Permissions Vulnerability
CVE-2023-34048January 22, 2024Critical 9.8Exploited
VMware vCenter Server Out-of-Bounds Write Vulnerability