Vmware - vulnerabilities (CVEs)

1122 CVEs in 308 products, 5 in the last 30 days, newest from 2026-10-07.

Products

Workstation - 213 CVEs
Cloud Foundation - 141 CVEs
Fusion - 131 CVEs
Esxi - 116 CVEs
Player - 89 CVEs
Spring Framework - 86 CVEs
Vcenter Server - 81 CVEs
Esx - 63 CVEs
Server - 58 CVEs
Ace - 44 CVEs
Spring Security - 44 CVEs
Identity Manager - 28 CVEs
Workstation Pro - 27 CVEs
Workstation Player - 26 CVEs
Horizon Client - 25 CVEs
Spring Ai - 23 CVEs
Tools - 22 CVEs
Vrealize Suite Lifecycle Manager - 21 CVEs
Spring Boot - 20 CVEs
Vmware Esxi - 20 CVEs
Vrealize Automation - 20 CVEs
Vmware Workstation - 19 CVEs
Vrealize Operations - 18 CVEs
Spring Integration - 17 CVEs
Telco Cloud Platform - 17 CVEs
Aria Operations - 16 CVEs
Vmware Aria Operations - 15 CVEs
Vrealize Log Insight - 15 CVEs
Workspace One Access - 15 CVEs
Horizon View - 14 CVEs
Telco Cloud Infrastructure - 14 CVEs
Vcenter Server Appliance - 14 CVEs
Identity Manager Connector - 13 CVEs
Spring Cloud Config - 13 CVEs
Spring Cloud Function - 12 CVEs
Spring Data Rest - 12 CVEs
One Access - 11 CVEs
Salt - 11 CVEs
Spring Advanced Message Queuing Protocol - 11 CVEs
Virtualcenter - 10 CVEs
Access Connector - 9 CVEs
Horizon View Client For Windows - 9 CVEs
Spring For Graphql - 9 CVEs
Vmware Server - 9 CVEs
Aria Operations For Logs - 8 CVEs
Aria Operations For Networks - 8 CVEs
Avi Load Balancer - 8 CVEs
Esx Server - 8 CVEs
Vmware Fusion - 8 CVEs
Vmware Telco Cloud Platform - 8 CVEs
Vrealize Operations Manager - 8 CVEs
Vsphere Data Protection - 8 CVEs
View - 7 CVEs
Vma - 7 CVEs
Vsphere Foundation - 7 CVEs
Gsx Server - 6 CVEs
Horizon - 6 CVEs
Horizon View Client - 6 CVEs
Movie Decoder - 6 CVEs
Rabbitmq - 6 CVEs
Remote Console - 6 CVEs
Sd-wan Orchestrator - 6 CVEs
Spring Cloud Gateway - 6 CVEs
Spring For Apache Kafka - 6 CVEs
Workstation Pro Player - 6 CVEs
Workstation Proplayer - 6 CVEs
Fusion Pro - 5 CVEs
Fusion Pro Fusion - 5 CVEs
Open Vm Tools - 5 CVEs
Rabbitmq Java Client - 5 CVEs
Vcenter - 5 CVEs
Vcloud Director - 5 CVEs
Vmware Cloud Foundation - 5 CVEs
Vmware Cloud Foundation Vcenter Server - 5 CVEs
Vmware Player - 5 CVEs
Vmware Vcenter Server Vcenter Server - 5 CVEs
Workspace One Assist - 5 CVEs
Airwatch - 4 CVEs
Carbon Black App Control - 4 CVEs
Horizon Daas - 4 CVEs
Nsx - 4 CVEs
Photon Os - 4 CVEs
Spring Cloud Stream - 4 CVEs
Springsource Spring Security - 4 CVEs
Vcf Operations - 4 CVEs
Vmware Aria Operations For Logs - 4 CVEs
Vmware Telco Cloud Infrastructure - 4 CVEs
Vmware Tools - 4 CVEs
Vmware Vcenter Server - 4 CVEs
Vsphere Client - 4 CVEs
Airwatch Agent - 3 CVEs
Airwatch Console - 3 CVEs
And Fusion - 3 CVEs
Aria Automation - 3 CVEs
Cloud Director - 3 CVEs
Installbuilder - 3 CVEs
Ixgben - 3 CVEs
Nsx-t - 3 CVEs
Single Sign-on For Pivotal Cloud Foundry - 3 CVEs
Spring Data Mongodb - 3 CVEs
Spring Hateoas - 3 CVEs
Spring Integration Zip - 3 CVEs
Studio - 3 CVEs
Vmware Aria Automation - 3 CVEs
Vmware Nsx - 3 CVEs
Vrealize Network Insight - 3 CVEs
Vrealize Operations For Horizon Adapter - 3 CVEs
Vrealize Orchestrator - 3 CVEs
Vsphere - 3 CVEs
Workstation And Fusion - 3 CVEs
Access - 2 CVEs
Ace 2 - 2 CVEs
Airwatch Inbox - 2 CVEs
App Volumes - 2 CVEs
Application Remote Collector - 2 CVEs
Enhanced Authentication Plugin - 2 CVEs
Gemfire - 2 CVEs
Horizon View Agent - 2 CVEs
Hyperic Hq - 2 CVEs
Hyperic Server - 2 CVEs
Infrastructure - 2 CVEs
Nsx Data Center - 2 CVEs
Nsx Edge - 2 CVEs
Open-vm-tools - 2 CVEs
Pinniped - 2 CVEs
Salt Project - 2 CVEs
Sd-wan Edge - 2 CVEs
Spring Cloud Data Flow - 2 CVEs
Spring Cloud Netflix - 2 CVEs
Spring Data Gemfire - 2 CVEs
Spring Data Geode - 2 CVEs
Spring Grpc - 2 CVEs
Tanzu Application Service For Virtual Machines - 2 CVEs
Tanzu Gemfire For Virtual Machines - 2 CVEs
Tc Server - 2 CVEs
Vcenter Chargeback Manager - 2 CVEs
Vcenter Orchestrator - 2 CVEs
Vix Api - 2 CVEs
Vm-support - 2 CVEs
Vmware Airwatch Console Awc - 2 CVEs
Vmware Avi Load Balancer - 2 CVEs
Vmware Cloud Foundation Operations - 2 CVEs
Vmware Cloud Foundation Vmware Vcenter Server - 2 CVEs
Vmware Enhanced Authentication Plug-in Eap - 2 CVEs
Vmware Esx - 2 CVEs
Vmware Hcx - 2 CVEs
Vmware Horizon Agent For Linux - 2 CVEs
Vmware Player 2 - 2 CVEs
Vmware Workstation And Fusion - 2 CVEs
Vsphere Data Protection Vdp - 2 CVEs
Vsphere Esxi - 2 CVEs
Workspace One Boxer - 2 CVEs
Workspace One Content - 2 CVEs
Workspace One Uem - 2 CVEs
Workspace One Uem Console - 2 CVEs
Airwatch Agent For Ios Prior To 5.8.1 - 1 CVEs
Airwatch Launcher - 1 CVEs
Ams - 1 CVEs
And Horizon Client - 1 CVEs
And Vmware Fusion - 1 CVEs
Bitnami - 1 CVEs
Bitnamichartsappsmith - 1 CVEs
Bitnamichartsdrupal - 1 CVEs
Bitnamichartswordpress - 1 CVEs
Bosh Editor - 1 CVEs
Capacityiq - 1 CVEs
Carbon Black Cloud - 1 CVEs
Carbon Black Cloud Workload - 1 CVEs
Cloud Foundation Operations - 1 CVEs
Cloudfoundry Manifest Yml Support - 1 CVEs
Concourse Ci Pipeline Editor - 1 CVEs
Content Locker For Ios - 1 CVEs
Converter Enterprise Client - 1 CVEs
Greenplum Database - 1 CVEs
Harbor Container Registry - 1 CVEs
Horizon 7 - 1 CVEs
Horizon Client For Linux - 1 CVEs
Horizon Client For Windows - 1 CVEs
Horizon View Agents - 1 CVEs
Horizon View Client For Mac - 1 CVEs
Hyperic Agent - 1 CVEs
I40en - 1 CVEs
Intelligent Hub - 1 CVEs
Isolation Segment - 1 CVEs
Lab Manager - 1 CVEs
Nsx-v Edge - 1 CVEs
Nsx Sd-wan By Velocloud - 1 CVEs
Operations Manager - 1 CVEs
Ovf Tool - 1 CVEs
Pivotal Scheduler - 1 CVEs
Pivotal Software Mysql - 1 CVEs
Reactor Netty - 1 CVEs
Sd-wan By Velocloud - 1 CVEs
Sd-wan Edge Firmware - 1 CVEs
Single Sign-on For Tanzu - 1 CVEs
Spring - 1 CVEs
Spring Authorization Server - 1 CVEs
Spring Boot Tools - 1 CVEs
Spring Cloud Contract - 1 CVEs
Spring Cloud Gateway Server Mvc - 1 CVEs
Spring Cloud Gateway Server Webflux - 1 CVEs
Spring Cloud Netflix Zuul - 1 CVEs
Spring Cloud Openfeign - 1 CVEs
Spring Cloud Sso Connector - 1 CVEs
Spring Cloud Task - 1 CVEs
Spring Cloud Vault - 1 CVEs
Spring Data Jpa - 1 CVEs
Spring For Apache Pulsar - 1 CVEs
Spring Session - 1 CVEs
Spring Social - 1 CVEs
Spring Tools - 1 CVEs
Spring Vault - 1 CVEs
Stage Manager - 1 CVEs
Tanzu Application Service For Vms - 1 CVEs
Thinapp - 1 CVEs
Unified Access Gateway - 1 CVEs
Vcenter Lab Manager - 1 CVEs
Vcenter Operations - 1 CVEs
Vcenter Server Appliance Vcsa - 1 CVEs
Vcenter Stage Manager - 1 CVEs
Vcenter Update Manager - 1 CVEs
Vcloud Automation Center - 1 CVEs
Vcloud Automation Identity Appliance - 1 CVEs
Vcloud Networking And Security - 1 CVEs
Vcloud Networking And Security Edge - 1 CVEs
Velero - 1 CVEs
Vi-client - 1 CVEs
View Manager - 1 CVEs
View Planner - 1 CVEs
Virtual Infrastructure Client - 1 CVEs
Vmware Ace - 1 CVEs
Vmware Airwatch Launcher For Android Awl - 1 CVEs
Vmware Cloud Foundation Vmware Aria Automation - 1 CVEs
Vmware Horizon 6 - 1 CVEs
Vmware Horizon Client For Mac - 1 CVEs
Vmware Horizon Client For Windows - 1 CVEs
Vmware Remote Console For Mac - 1 CVEs
Vmware Remote Console For Windows - 1 CVEs
Vmware Tanzu Application Service For Vms - 1 CVEs
Vmware Tools For Windows - 1 CVEs
Vmware Tools For Windows Vmware Tools - 1 CVEs
Vmware Vcloud Director For Service Providers Vcd - 1 CVEs
Vmware Virtualcenter - 1 CVEs
Vmware Vrealize Log Insight - 1 CVEs
Vmware Vsphere Esxi - 1 CVEs
Vmware Workspace One Unified Endpoint Management Console Airwatch Console - 1 CVEs
Vmware Workstation For Windows - 1 CVEs
Vmware Xenon - 1 CVEs
Vrealize Business Advanced And Enterprise - 1 CVEs
Vrealize Business For Cloud - 1 CVEs
Vrealize Operations For Horizon - 1 CVEs
Vrealize Operations For Horizon V4h - 1 CVEs
Vrealize Operations For Published Applications - 1 CVEs
Vrealize Operations For Published Applications V4pa - 1 CVEs
Vrealize Operations Tenant - 1 CVEs
Vshield Manager - 1 CVEs
Vsphere Integrated Containers - 1 CVEs
Vsphere Replication - 1 CVEs
Vsphere Web Client - 1 CVEs
Workspace One - 1 CVEs
Workspace One Intelligent Hub - 1 CVEs
Workspace One Launcher - 1 CVEs
Workspace One Notebook - 1 CVEs
Workspace One People - 1 CVEs
Workspace One Piv-d Manager - 1 CVEs
Workspace One Sdk - 1 CVEs
Workspace One Sdk (objective-c) - 1 CVEs
Workspace One Unified Endpoint Management - 1 CVEs
Workspace One Web - 1 CVEs
Xenon - 1 CVEs
Zimbra Desktop - 1 CVEs
Capacity Planner - 0 CVEs
Consolidated Backup Framework - 0 CVEs
Converter - 0 CVEs
Data Recovery - 0 CVEs
Greenplum - 0 CVEs
Identity Manger - 0 CVEs
Infrastructure Client - 0 CVEs
Infrastructure Update - 0 CVEs
Infrastructure Virtualcenter - 0 CVEs
License Server - 0 CVEs
Nsx-t Data Center - 0 CVEs
Openpegasus Management Server - 0 CVEs
Remote Console Plug-in - 0 CVEs
Spring Amqp - 0 CVEs
Spring Data Java Persistence Api - 0 CVEs
Spring Micrometer - 0 CVEs
Update Manager - 0 CVEs
Vcenter Converter - 0 CVEs
Vcenter Converter Agent - 0 CVEs
Vcenter Converter Client - 0 CVEs
Vcenter Converter Standalone - 0 CVEs
Vcenter Converter Standalone Agent - 0 CVEs
Vcenter Guided Consolidation - 0 CVEs
Vcenter Inventory Service - 0 CVEs
Velocloud Orchestrator - 0 CVEs
View Client - 0 CVEs
Virtual Disk Development Kit - 0 CVEs
Virtual Infrastructure Remote Command Line Interface - 0 CVEs
Virtualcenter Server - 0 CVEs
Vix - 0 CVEs
Vmci Sockets - 0 CVEs
Vsphere Host Update Utility - 0 CVEs
Vsphere Profile-driven Storage - 0 CVEs
Vsphere Server - 0 CVEs
Vsphere Update Manager - 0 CVEs
Vsphere Update Manager Client - 0 CVEs
Vsphere Virtual Machine - 0 CVEs

Newest CVEs of Vmware

CVE-2026-59347 - CVSS 8.1 (high), 2026-10-07: VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual…
CVE-2026-59346 - CVSS 9.3 (critical), 2026-10-07: VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with…
CVE-2026-106123 - CVSS 5.7 (medium), 2026-10-06: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0,…
CVE-2026-106122 - CVSS 7.5 (high), 2026-10-06: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0,…
CVE-2026-106121 - CVSS 7.5 (high), 2026-10-06: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0,…
CVE-2026-59324 - CVSS 8.2 (high), 2026-08-27: When an IntegrationFlow uses .fluxTransform() with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same…
CVE-2026-59322 - CVSS 6.3 (medium), 2026-08-27: The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte…
CVE-2026-59321 - CVSS 5.4 (medium), 2026-08-27: A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not thread-safe, e.g.…
CVE-2026-59320 - CVSS 6.5 (medium), 2026-08-27: When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one…
CVE-2026-59317 - CVSS 6.5 (medium), 2026-08-27: DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new…
CVE-2026-59319 - CVSS 4.3 (medium), 2026-08-27: RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying…
CVE-2026-59315 - CVSS 5.3 (medium), 2026-08-27: The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config…
CVE-2026-59314 - CVSS 3.7 (low), 2026-08-27: Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious…
CVE-2026-59311 - CVSS 6.8 (medium), 2026-08-27: A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating…
CVE-2026-59306 - CVSS 3.8 (low), 2026-08-27: Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud…
CVE-2026-59313 - CVSS 9.8 (critical), 2026-08-27: Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE). Spring Framework 7.0.0 -…
CVE-2026-59307 - CVSS 8 (high), 2026-08-27: An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives no protection at all when the store is a Spring-managed…
CVE-2026-59305 - CVSS 3.8 (low), 2026-08-27: Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream…
CVE-2026-59304 - CVSS 3.8 (low), 2026-08-27: Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud…
CVE-2026-59303 - CVSS 3.8 (low), 2026-08-27: Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud…
CVE-2026-59302 - CVSS 4.9 (medium), 2026-08-27: Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 -…
CVE-2026-59301 - CVSS 4.9 (medium), 2026-08-27: Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud…
CVE-2026-59300 - CVSS 3.5 (low), 2026-08-27: Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud…
CVE-2026-59299 - CVSS 3.5 (low), 2026-08-27: Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4…
CVE-2026-59298 - CVSS 3.5 (low), 2026-08-27: Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring…
CVE-2026-59297 - CVSS 3.5 (low), 2026-08-27: Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function…
CVE-2026-59294 - CVSS 6.5 (medium), 2026-08-27: ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and…
CVE-2026-59293 - CVSS 6.6 (medium), 2026-08-27: Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate down to SMB1/CIFS, which lacks mandatory signing/encryption and is…
CVE-2026-59292 - CVSS 3.2 (low), 2026-08-27: PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to…
CVE-2026-59291 - CVSS 5.5 (medium), 2026-08-27: Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring…