VMware vulnerabilities
We track 175 vulnerabilities in VMware products across 60+ products. 168 are rated high or critical, and 34 have been exploited in real attacks. The most recent was published on October 7, 2026.
Latest VMware vulnerabilities
- 5.3 Medium severity
VMware vCenter Server Improper Access Control Exploited
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being acc
- 9.8 Critical severity
VMware vCenter Server File Upload Exploited
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.
- 9.8 Critical severity
VMware vCenter Server Improper Input Validation Exploited
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this
- 7.5 High severity
VMware Server Side Request Forgery in vRealize Operations Manager API Exploited
Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credent
- 5.3 Medium severity
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Exploited
The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter
- 9.8 Critical severity
VMware vCenter Server Remote Code Execution Exploited
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system t
- 9.1 Critical severity
Multiple VMware Products Command Injection Exploited
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.
- 9.8 Critical severity
VMware ESXi OpenSLP Use-After-Free Exploited
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine
- 6.5 Medium severity
SaltStack Salt Path Traversal Exploited
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.
- 9.8 Critical severity
SaltStack Salt Authentication Bypass Exploited
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be us
- 9.8 Critical severity
VMware vCenter Server Information Disclosure Exploited
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
- 7.8 High severity
VMware Multiple Products Privilege Escalation Exploited
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitatio
- 9.8 Critical severity
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Exploited
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
- 8.1 High severity
VMware SD-WAN Edge by VeloCloud Command Injection Exploited
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing thi
- 7.8 High severity
Linux Kernel Improper Input Validation Exploited
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via cr