Vmware Vsphere vulnerabilities

• broadcom vmware esx, vmware esx, cloud foundation +3 more +5 more ESX insufficient logging vulnerability CVE-2026-41709 In KEV 2.7 LowJuly 30, 2026
• vmware esx, fusion, workstation +3 more +5 more Out-of-bounds read vulnerability CVE-2026-41703 7.6 HighJuly 30, 2026
• vmware esx, cloud foundation, telco cloud platform +1 more +3 more VMXNET3 out-of-bounds write vulnerability CVE-2026-47876 9.3 CriticalJuly 30, 2026
• vmware vcenter, cloud foundation, telco cloud infrastructure +3 more +5 more vCenter authentication-bypass vulnerability CVE-2026-59309 9.8 CriticalJuly 30, 2026
• broadcom vmware vcenter, vmware vcenter, cloud foundation +4 more +6 more vCenter directory-traversal vulnerability CVE-2026-59310 In KEVPublic exploit 9.8 CriticalJuly 30, 2026
• vmware cloud foundation, aria operations, telco cloud platform +2 more +4 more VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) CVE-2026-41723 8.0 HighJune 8, 2026
• vmware cloud foundation, aria operations, telco cloud platform +2 more +4 more VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) CVE-2026-41722 8.0 HighJune 8, 2026
• vmware vcenter, cloud foundation, telco cloud infrastructure +2 more +4 more Header injection vulnerability CVE-2025-41250 8.5 HighSeptember 29, 2025
• vmware esxi, fusion, workstation +4 more +6 more VMCI integer-underflow vulnerability CVE-2025-41237 9.3 CriticalJuly 15, 2025
• vmware fusion, workstation, esxi, workstation, and fusion +1 more +3 more VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation ... CVE-2020-3960 8.4 HighSeptember 15, 2021
• vmware vsphere replication vSphere Replication 8.3.x prior to 8.3.1.2, 8.2.x prior to 8.2.1.1, 8.1.x prior to 8.1.2.3 and 6... CVE-2021-21976 7.2 HighFebruary 11, 2021
• vmware esxi, vcenter server, vsphere esxi +2 more VMware vSphere ESXi (6.7 prior to ESXi670-201904101-SG, 6.5 prior to ESXi650-201907101-SG, 6.0... CVE-2019-5531 5.4 MediumSeptember 18, 2019
• dell avamar, emc avamar, emc integrated data protection appliance +2 more +4 more Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability CVE-2018-11077 6.7 MediumNovember 26, 2018
• dell avamar, emc avamar, emc integrated data protection appliance +2 more +4 more Dell EMC Avamar and Integrated Data Protection Appliance Information Exposure Vulnerability CVE-2018-11076 6.5 MediumNovember 26, 2018
• dell avamar, emc avamar, emc integrated data protection appliance +2 more +4 more Dell EMC Avamar and Integrated Data Protection Appliance Open Redirection Vulnerability CVE-2018-11067 6.1 MediumNovember 26, 2018
• dell avamar, emc avamar, emc integrated data protection appliance +2 more +4 more Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution Vulnerability CVE-2018-11066 9.8 CriticalNovember 26, 2018
• vmware vrealize automation, vsphere integrated containers +1 more VMware Realize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3)... CVE-2017-4947 9.8 CriticalJanuary 29, 2018
• vmware vsphere web client, vcenter server +1 more The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the... CVE-2017-4928 7.5 HighNovember 17, 2017
• vmware vsphere data protection (vdp), vsphere data protection +1 more VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server... CVE-2017-4917 9.8 CriticalJune 7, 2017
• vmware vsphere data protection (vdp), vsphere data protection +1 more VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization... CVE-2017-4914 Public exploit 9.8 CriticalJune 7, 2017
• vmware vsphere client VMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi... CVE-2016-7458 5.8 MediumDecember 29, 2016
• vmware vsphere data protection VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly... CVE-2016-7456 Public exploit EPSS 32.8% 9.8 CriticalDecember 29, 2016
• vmware vsphere data protection VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy... CVE-2014-4632 4.3 MediumFebruary 1, 2015
• vmware vsphere client VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X... CVE-2014-1210 5.8 MediumApril 11, 2014
• vmware vsphere client VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly... CVE-2014-1209 9.3 HighApril 11, 2014
• vmware esx, esxi, vcenter server +3 more +5 more VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5,... CVE-2013-1405 10.0 HighFebruary 15, 2013
• vmware vsphere Cross-site scripting (XSS) vulnerability in the internal browser in vSphere Client in VMware... CVE-2012-1512 4.3 MediumMarch 16, 2012