Vmware Infrastructure vulnerabilities

• vmware vcenter, cloud foundation, telco cloud infrastructure +3 more +5 more vCenter authentication-bypass vulnerability CVE-2026-59309 9.8 CriticalJuly 30, 2026
• broadcom vmware vcenter, vmware vcenter, cloud foundation +4 more +6 more vCenter directory-traversal vulnerability CVE-2026-59310 In KEVPublic exploit 9.8 CriticalJuly 30, 2026
• vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 more VMware Aria Operations privilege escalation vulnerability CVE-2026-22721 6.2 MediumFebruary 25, 2026
• vmware aria operations, cloud foundation, telco cloud infrastructure +2 more +4 more VMware Aria Operations stored cross-site scripting vulnerability CVE-2026-22720 8.0 HighFebruary 25, 2026
• broadcom vmware aria operations, vmware aria operations, cloud foundation +3 more +5 more VMware Aria Operations command injection vulnerability CVE-2026-22719 In KEV EPSS 18.3% 8.1 HighFebruary 25, 2026
• vmware vcenter, cloud foundation, telco cloud infrastructure +2 more +4 more Header injection vulnerability CVE-2025-41250 8.5 HighSeptember 29, 2025
• vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 more VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) CVE-2025-41245 4.9 MediumSeptember 29, 2025
• broadcom vmware aria operations and vmware tools, vmware aria operations, tools +7 more +9 more VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) CVE-2025-41244 In KEVPublic exploitFix available 7.8 HighSeptember 29, 2025
• vmware vcenter, cloud foundation, telco cloud infrastructure +1 more +3 more Denial-of-service vulnerability CVE-2025-41241 4.4 MediumJuly 29, 2025
• vmware esxi, fusion, tools +4 more +6 more vSockets information-disclosure vulnerability CVE-2025-41239 7.1 HighJuly 15, 2025
• vmware esxi, fusion, workstation +3 more +5 more PVSCSI heap-overflow vulnerability CVE-2025-41238 9.3 CriticalJuly 15, 2025
• vmware esxi, fusion, workstation +4 more +6 more VMCI integer-underflow vulnerability CVE-2025-41237 9.3 CriticalJuly 15, 2025
• vmware esxi, fusion, workstation +3 more +5 more VMXNET3 integer-overflow vulnerability CVE-2025-41236 9.3 CriticalJuly 15, 2025
• broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 more VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to... CVE-2025-22245 5.9 MediumJune 4, 2025
• broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 more VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due... CVE-2025-22244 6.9 MediumJune 4, 2025
• broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 more VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper... CVE-2025-22243 7.5 HighJune 4, 2025
• vmware esxi, vcenter server, cloud foundation +2 more +4 more VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability CVE-2025-41228 Public exploit 4.3 MediumMay 20, 2025
• vmware esxi, fusion, workstation +3 more +5 more Denial-of-Service Vulnerability CVE-2025-41227 5.5 MediumMay 20, 2025
• vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 more Guest Operations Denial-of-Service Vulnerability CVE-2025-41226 6.8 MediumMay 20, 2025
• vmware vcenter server, cloud foundation, telco cloud infrastructure +1 more +3 more VMware vCenter Server authenticated command-execution vulnerability CVE-2025-41225 8.8 HighMay 20, 2025
• vmware esxi, esxi, workstation, and fusion, fusion +4 more +6 more VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an... CVE-2025-22226 In KEV 7.1 HighMarch 4, 2025
• vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 more VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within... CVE-2025-22225 In KEV 8.2 HighMarch 4, 2025
• vmware esxi, workstation, cloud foundation +3 more +5 more VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that... CVE-2025-22224 In KEV 9.3 CriticalMarch 4, 2025
• tomsawyer get extension factory, vmware infrastructure, virtual infrastructure client +2 more Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET... CVE-2011-2217 Public exploit EPSS 42.0% 9.3 HighJune 6, 2011
• vmware esx, infrastructure, server +2 more +4 more vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the... CVE-2006-3589 3.6 LowJuly 19, 2006