Skip to content
Vmware vulnerabilities
Products
Show 140 moreShow less
Newest
-
autodesk fusion
Dynamic Library Loading Process Control in Autodesk Fusion Desktop
CVE-2026-113775
7.8 High
-
autodesk fusion
Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
CVE-2026-102638
7.1 High
-
autodesk fusion
Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
CVE-2026-102637
7.1 High
-
autodesk fusion
Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
CVE-2026-102636
7.1 High
-
vmware fusion, workstation +1 more
VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability
CVE-2026-59347
8.1 High
-
vmware fusion, workstation +1 more
VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability
CVE-2026-59346
Public exploit
9.3 Critical
-
vmware rabbitmq java client, com.rabbitmq amqp-client, rabbitmq rabbitmq-java-client +2 more
RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()
CVE-2026-106123
Fix available
5.7 Medium
-
vmware rabbitmq java client, com.rabbitmq amqp-client, rabbitmq rabbitmq-java-client +2 more
RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers
CVE-2026-106122
Fix available
6.0 Medium
-
vmware rabbitmq java client, com.rabbitmq amqp-client, rabbitmq rabbitmq-java-client +2 more
RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS
CVE-2026-106121
Fix available
4.9 Medium
-
autodesk fusion
Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop
CVE-2026-85217
8.6 High
-
spring integration, vmware spring integration +1 more
fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction
CVE-2026-59324
Fix available
8.2 High
-
spring integration, vmware spring integration +1 more
EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders
CVE-2026-59322
Fix available
6.3 Medium
-
spring integration, vmware spring integration +1 more
Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check
CVE-2026-59321
Fix available
4.2 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
In Spring AMQP the link credit never replenished on listener exception path
CVE-2026-59320
6.5 Medium
-
spring ai, vmware spring ai +1 more
RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure
CVE-2026-59319
4.3 Medium
-
spring for apache kafka, vmware spring for apache kafka +1 more
In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop
CVE-2026-59317
Fix available
6.5 Medium
-
spring cloud config, vmware spring cloud config +1 more
Spring Cloud Config Monitor Denial of Service
CVE-2026-59315
5.3 Medium
-
spring framework, vmware spring framework +1 more
Spring Framework response splitting in ContentDisposition
CVE-2026-59314
Fix available
3.7 Low
-
spring integration, vmware spring integration +1 more
Fixed predictable /tmp/ziptransformer work directory enables symlink pre-creation
CVE-2026-59311
Fix available
6.8 Medium
-
spring cloud stream, vmware spring cloud stream +1 more
Potential for deserialization of untrusted types in Spring Cloud Stream
CVE-2026-59306
Fix available
3.1 Low
-
spring framework, vmware spring framework +1 more
Server Sent Event stream corruption in Spring MVC functional web framework
CVE-2026-59313
Fix available
9.8 Critical
-
spring integration, vmware spring integration +1 more
Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference
CVE-2026-59307
Fix available
8.0 High
-
spring cloud stream, vmware spring cloud stream +1 more
Partition interceptor may be improperly added while sending message
CVE-2026-59305
Fix available
3.1 Low
-
spring cloud stream, vmware spring cloud stream +1 more
Improper caching of the original content type in Spring Cloud Stream Avro
CVE-2026-59304
3.1 Low
-
spring cloud stream, vmware spring cloud stream +1 more
Dynamic destination cache size is not properly bound in Spring Cloud Stream
CVE-2026-59303
Fix available
3.1 Low
-
spring cloud stream, vmware spring cloud function +1 more
Potential for logging sensitive data in Spring Cloud Stream
CVE-2026-59302
Fix available
3.1 Low
-
spring cloud function, vmware spring cloud function +1 more
Potential for logging sensitive data in Spring Cloud Function Azure
CVE-2026-59301
Fix available
3.1 Low
-
spring cloud function, vmware spring cloud function +1 more
Potential for logging sensitive data in Spring Cloud Function AWS
CVE-2026-59300
Fix available
3.1 Low
-
spring cloud function, vmware spring cloud function +1 more
Composition lookup can potentially poison base function in Spring Cloud Function
CVE-2026-59299
Fix available
3.1 Low
-
spring cloud function, vmware spring cloud function +1 more
Potential for improper filtering of HTTP headers in Spring Cloud Function
CVE-2026-59298
Fix available
3.1 Low
-
spring cloud function, vmware spring cloud function +1 more
Spring Cloud Function can incorrectly determine if URI is secure
CVE-2026-59297
3.1 Low
-
spring ai, vmware spring ai +1 more
Arbitrary File Write via Path Traversal in ResourceCacheService
CVE-2026-59294
Fix available
5.9 Medium
-
spring integration, vmware spring integration +1 more
SMB minimum protocol dialect defaults to SMB1
CVE-2026-59293
Fix available
6.6 Medium
-
spring integration, vmware spring integration +1 more
World-readable metadata file in PropertiesPersistingMetadataStore (insecure temp-file permissions)
CVE-2026-59292
Fix available
3.2 Low
-
spring cloud function, vmware spring cloud function +1 more
Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function
CVE-2026-59291
Fix available
2.0 Low
-
spring for graphql, vmware spring for graphql +1 more
Spring for GraphQL WebSocket Client Denial of Service
CVE-2026-59287
Fix available
5.9 Medium
-
spring for graphql, vmware spring for graphql +1 more
Spring for GraphQL Unsafe Deserialization in pagination support
CVE-2026-59285
8.1 High
-
spring framework, vmware spring framework +1 more
Spring Framework Safety Guard Bypass via SpEL Expression Compilation
CVE-2026-59283
Fix available
9.1 Critical
-
spring framework, vmware spring framework +1 more
Spring Framework Denial of Service via Unbounded List Growth in Data Binding
CVE-2026-59282
Fix available
7.5 High
-
spring security, vmware spring security +1 more
Spring Security InetAddressMatchers Incomplete Internal Network Classification
CVE-2026-59277
3.7 Low
-
spring security, vmware spring security +1 more
Timing Attack via Non-Constant-Time Comparison of Sensitive Values
CVE-2026-59276
Fix available
5.9 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
Log4j2 AmqpAppender disables TLS hostname verification by default
CVE-2026-59272
Fix available
6.8 Medium
-
broadcom spring authorization server, spring authorization server +1 more
Spring Authorization Server: Open Redirect via request_uri parameter
CVE-2026-59355
6.1 Medium
-
vmware spring security, vmware by broadcom spring security (oauth2 authorization server module) +1 more
Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata
CVE-2026-59354
9.6 Critical
-
spring framework, vmware spring framework +1 more
Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder
CVE-2026-47891
Fix available
9.8 Critical
-
spring framework, vmware spring framework +1 more
Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse
CVE-2026-47889
Fix available
7.5 High
-
spring framework, vmware spring framework +1 more
Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler
CVE-2026-47888
Fix available
7.5 High
-
spring framework, vmware spring framework +1 more
Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions
CVE-2026-47886
Fix available
7.5 High
-
spring framework, vmware spring framework +1 more
Spring Framework maxPartSize Ignored in PartEventHttpMessageReader
CVE-2026-47885
Fix available
7.5 High
-
spring framework, vmware spring framework +1 more
Spring Framework Improper Path Limitation in XsltView
CVE-2026-47884
Public exploitFix available
9.8 Critical
- Show olderLoading…