Telco Cloud Infrastructure
VMware · 14 CVEs
vCenter authentication-bypass vulnerability
Jul 30, 2026
vCenter directory-traversal vulnerability
Jul 30, 2026
VMware Aria Operations privilege escalation vulnerability
Feb 25, 2026
VMware Aria Operations stored cross-site scripting vulnerability
Feb 25, 2026
VMware Aria Operations command injection vulnerability
Feb 25, 2026
Header injection vulnerability
Sep 29, 2025
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-20…
Sep 29, 2025
Denial-of-service vulnerability
Jul 29, 2025
vSockets information-disclosure vulnerability
Jul 15, 2025
PVSCSI heap-overflow vulnerability
Jul 15, 2025
VMCI integer-underflow vulnerability
Jul 15, 2025
VMXNET3 integer-overflow vulnerability
Jul 15, 2025
VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validati…
Jun 4, 2025
VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input val…
Jun 4, 2025
VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation.
Jun 4, 2025
VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability
May 20, 2025
Denial-of-Service Vulnerability
May 20, 2025
Guest Operations Denial-of-Service Vulnerability
May 20, 2025
VMware vCenter Server authenticated command-execution vulnerability
May 20, 2025
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HG…
Mar 4, 2025
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may tri…
Mar 4, 2025
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds…
Mar 4, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-59309 | vCenter authentication-bypass vulnerability | CRITICAL | 0.61% | Jul 30, 2026 |
| CVE-2026-59310 KEV | vCenter directory-traversal vulnerability | CRITICAL | 2.56% | Jul 30, 2026 |
| CVE-2026-22721 | VMware Aria Operations privilege escalation vulnerability | HIGH | 0.71% | Feb 25, 2026 |
| CVE-2026-22720 | VMware Aria Operations stored cross-site scripting vulnerability | CRITICAL | 0.42% | Feb 25, 2026 |
| CVE-2026-22719 KEV | VMware Aria Operations command injection vulnerability | HIGH | 17.71% | Feb 25, 2026 |
| CVE-2025-41250 | Header injection vulnerability | HIGH | 0.64% | Sep 29, 2025 |
| CVE-2025-41244 KEV | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) | HIGH | 8.44% | Sep 29, 2025 |
| CVE-2025-41241 | Denial-of-service vulnerability | MEDIUM | 0.29% | Jul 29, 2025 |
| CVE-2025-41239 | vSockets information-disclosure vulnerability | HIGH | 3.04% | Jul 15, 2025 |
| CVE-2025-41238 | PVSCSI heap-overflow vulnerability | CRITICAL | 0.46% | Jul 15, 2025 |
| CVE-2025-41237 | VMCI integer-underflow vulnerability | CRITICAL | 0.46% | Jul 15, 2025 |
| CVE-2025-41236 | VMXNET3 integer-overflow vulnerability | CRITICAL | 2.57% | Jul 15, 2025 |
| CVE-2025-22245 | VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation. | MEDIUM | 0.26% | Jun 4, 2025 |
| CVE-2025-22244 | VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation. | MEDIUM | 0.31% | Jun 4, 2025 |
| CVE-2025-22243 | VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation. | HIGH | 0.34% | Jun 4, 2025 |
| CVE-2025-41228 | VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability | MEDIUM | 0.89% | May 20, 2025 |
| CVE-2025-41227 | Denial-of-Service Vulnerability | MEDIUM | 0.16% | May 20, 2025 |
| CVE-2025-41226 | Guest Operations Denial-of-Service Vulnerability | MEDIUM | 0.24% | May 20, 2025 |
| CVE-2025-41225 | VMware vCenter Server authenticated command-execution vulnerability | HIGH | 0.26% | May 20, 2025 |
| CVE-2025-22226 KEV | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrativ… | HIGH | 1.77% | Mar 4, 2025 |
| CVE-2025-22225 KEV | VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading t… | HIGH | 1.02% | Mar 4, 2025 |
| CVE-2025-22224 KEV | VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local admi… | CRITICAL | 1.56% | Mar 4, 2025 |
Showing 1 to 14 of 14 CVEs