Login Request a demo
VM
Vendor
VMware
214 products with CVEs on record
1,971
CVEs
109
On KEV
7
New 30D
Products
VW
VMware Workstation
VMware
9.3
17 CVEs0 on KEV2 new
VF
VMware Fusion
VMware
9.3
2 CVEs0 on KEV2 new
CF
Cloud Foundation
VMware
9.8
141 CVEs21 on KEV0 new
RJ
Rabbitmq Java Client
Vmware
7.5
5 CVEs0 on KEV3 new
VS
vCenter Server
Virtualization
9.8
86 CVEs12 on KEV0 new
ES
ESXi
Virtualization
9.9
138 CVEs8 on KEV0 new
TC
Telco Cloud Platform
VMware
9.8
19 CVEs6 on KEV0 new
TC
Telco Cloud Infrastructure
VMware
9.8
12 CVEs6 on KEV0 new
VS
Vrealize Suite Lifecycle Manager
Vmware
9.8
21 CVEs4 on KEV0 new
WO
Workspace ONE Access
IAM
9.8
30 CVEs3 on KEV0 new
MP
Multiple Products
VMware
9.1
3 CVEs3 on KEV0 new
WO
Workstation
VMware
9.9
213 CVEs2 on KEV0 new
FU
Fusion
VMware
9.9
131 CVEs2 on KEV0 new
TO
Tools
VMware
7.8
22 CVEs2 on KEV0 new
VA
Vrealize Automation
Vmware
9.8
20 CVEs2 on KEV0 new
AO
Aria Operations
Vmware
9.0
16 CVEs2 on KEV0 new
VA
VMware Aria Operations
VMware
8.1
5 CVEs2 on KEV0 new
AR
Application Remote Collector
Vmware
9.8
2 CVEs2 on KEV0 new
VC
VMware Cloud Foundation
VMware
8.2
2 CVEs2 on KEV0 new
SF
Spring Framework
VMware
9.8
83 CVEs1 on KEV0 new
HC
Horizon Client
Vmware
7.8
25 CVEs1 on KEV0 new
IM
Identity Manager Connector
Vmware
9.8
13 CVEs1 on KEV0 new
SC
Spring Cloud Config
Vmware
9.8
13 CVEs1 on KEV0 new
SD
Spring Data Rest
Vmware
9.8
12 CVEs1 on KEV0 new
OA
One Access
Vmware
9.8
11 CVEs1 on KEV0 new
SC
Spring Cloud Function
Vmware
9.8
11 CVEs1 on KEV0 new
AO
Aria Operations for Networks
VMware
9.8
8 CVEs1 on KEV0 new
VO
Vrealize Operations Manager
Vmware
7.5
8 CVEs1 on KEV0 new
OV
Open VM Tools
Vmware
7.8
7 CVEs1 on KEV0 new
RC
Remote Console
Vmware
8.8
6 CVEs1 on KEV0 new
SC
Spring Cloud Gateway
VMware
10.0
6 CVEs1 on KEV0 new
VF
vSphere Foundation
VMware
9.8
5 CVEs1 on KEV0 new
HD
Horizon Daas
Vmware
9.8
4 CVEs1 on KEV0 new
VO
VCF operations
VMware
8.0
4 CVEs1 on KEV0 new
VT
VMware Telco Cloud Platform
VMware
8.0
4 CVEs1 on KEV0 new
WO
Workspace One Uem Console
Vmware
7.5
2 CVEs1 on KEV0 new
CF
Cloud Foundation Operations
Vmware
7.8
1 CVEs1 on KEV0 new
EA
ESXi and Workstation
VMware
8.2
1 CVEs1 on KEV0 new
EW
ESXi, Workstation, and Fusion
VMware
6.0
1 CVEs1 on KEV0 new
NS
NSX SD-WAN by VeloCloud
VMware
8.1
1 CVEs1 on KEV0 new
SE
SD-WAN Edge
VMware
8.1
1 CVEs1 on KEV0 new
VS
vCenter Server and Cloud Foundation
VMware
5.3
1 CVEs1 on KEV0 new
VC
VMware Cloud Foundation Operations
VMware
8.1
1 CVEs1 on KEV0 new
VC
VMware Cloud Foundation (VMware vCenter Server)
VMware
9.8
1 CVEs1 on KEV0 new
VE
VMware ESXi and Horizon DaaS
VMware
9.8
1 CVEs1 on KEV0 new
VT
VMware Telco Cloud Infrastructure
VMware
7.8
1 CVEs1 on KEV0 new
VT
VMware tools
VMware
7.8
1 CVEs1 on KEV0 new
VO
vRealize Operations Manager API
VMware
7.5
1 CVEs1 on KEV0 new
WO
Workspace ONE Access and Identity Manager
VMware
9.8
1 CVEs1 on KEV0 new
PL
Player
Vmware
9.8
89 CVEs0 on KEV0 new
ES
ESX
VMware
9.9
87 CVEs0 on KEV0 new
SE
Server
Vmware
–
58 CVEs0 on KEV0 new
AC
Ace
Vmware
–
44 CVEs0 on KEV0 new
SS
Spring Security
Vmware
9.8
44 CVEs0 on KEV0 new
WP
Workstation Pro
Vmware
8.8
27 CVEs0 on KEV0 new
WP
Workstation Player
Vmware
8.8
26 CVEs0 on KEV0 new
SA
Spring AI
VMware
9.8
23 CVEs0 on KEV0 new
SB
Spring Boot
Vmware
9.8
20 CVEs0 on KEV0 new
VO
Vrealize Operations
Vmware
10.0
18 CVEs0 on KEV0 new
SI
Spring Integration
Vmware
9.8
17 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-59347
VW
VMware Workstation
VMware
8.1
0%
Oct 7VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability
CVE-2026-59346
VW
VMware Workstation
VMware
9.3
0%
Oct 7VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability
CVE-2026-106123
RJ
Rabbitmq Java Client
Vmware
5.5
0%
Oct 6RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()
CVE-2026-106122
RJ
Rabbitmq Java Client
Vmware
7.5
0%
Oct 6RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers
CVE-2026-106121
RJ
Rabbitmq Java Client
Vmware
7.5
1%
Oct 6RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS
CVE-2026-59324
SI
Spring Integration
Vmware
8.2
0%
Aug 27fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction
CVE-2026-59322
SI
Spring Integration
Vmware
6.3
0%
Aug 27EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders
CVE-2026-59321
SI
Spring Integration
Vmware
5.4
0%
Aug 27Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check
CVE-2026-59320
SA
Spring Advanced Message Queuing Protocol
Vmware
6.5
0%
Aug 27In Spring AMQP the link credit never replenished on listener exception path
CVE-2026-59319
SA
Spring AI
Vmware
4.3
0%
Aug 27RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure
CVE-2026-59317
SF
Spring For Apache Kafka
Vmware
6.5
0%
Aug 27In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop
CVE-2026-59315
SC
Spring Cloud Config
Vmware
5.3
0%
Aug 27Spring Cloud Config Monitor Denial of Service
CVE-2026-59314
SF
Spring Framework
Vmware
3.7
0%
Aug 27Spring Framework response splitting in ContentDisposition
CVE-2026-59311
SI
Spring Integration
Vmware
6.8
0%
Aug 27Fixed predictable /tmp/ziptransformer work directory enables symlink pre-creation
CVE-2026-59306
SC
Spring Cloud Stream
Vmware
3.8
0%
Aug 27Potential for deserialization of untrusted types in Spring Cloud Stream
CVE-2026-59313
SF
Spring Framework
Vmware
9.8
1%
Aug 27Server Sent Event stream corruption in Spring MVC functional web framework
CVE-2026-59307
SI
Spring Integration
Vmware
8.0
0%
Aug 27Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference
CVE-2026-59305
SC
Spring Cloud Stream
Vmware
3.8
0%
Aug 27Partition interceptor may be improperly added while sending message
CVE-2026-59304
SC
Spring Cloud Stream
Vmware
3.8
0%
Aug 27Improper caching of the original content type in Spring Cloud Stream Avro
CVE-2026-59303
SC
Spring Cloud Stream
Vmware
3.8
0%
Aug 27Dynamic destination cache size is not properly bound in Spring Cloud Stream
CVE-2026-59302
SC
Spring Cloud Function
Vmware
4.9
0%
Aug 27Potential for logging sensitive data in Spring Cloud Stream
CVE-2026-59301
SC
Spring Cloud Function
Vmware
4.9
0%
Aug 27Potential for logging sensitive data in Spring Cloud Function Azure
CVE-2026-59300
SC
Spring Cloud Function
Vmware
3.5
0%
Aug 27Potential for logging sensitive data in Spring Cloud Function AWS
CVE-2026-59299
SC
Spring Cloud Function
Vmware
3.5
0%
Aug 27Composition lookup can potentially poison base function in Spring Cloud Function
CVE-2026-59298
SC
Spring Cloud Function
Vmware
3.5
0%
Aug 27Potential for improper filtering of HTTP headers in Spring Cloud Function
CVE-2026-59297
SC
Spring Cloud Function
Vmware
3.5
0%
Aug 27Spring Cloud Function can incorrectly determine if URI is secure
CVE-2026-59294
SA
Spring AI
Vmware
6.5
0%
Aug 27Arbitrary File Write via Path Traversal in ResourceCacheService
CVE-2026-59293
SI
Spring Integration
Vmware
6.6
0%
Aug 27SMB minimum protocol dialect defaults to SMB1
CVE-2026-59292
SI
Spring Integration
Vmware
3.2
0%
Aug 27World-readable metadata file in PropertiesPersistingMetadataStore (insecure temp-file permissions)
CVE-2026-59291
SC
Spring Cloud Function
Vmware
5.5
0%
Aug 27Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function
CVE-2026-59289
SF
Spring For Graphql
Vmware
7.5
0%
Aug 27Spring for GraphQL Denial of Service via pagination support
CVE-2026-59288
SF
Spring For Graphql
Vmware
7.4
0%
Aug 27Spring for GraphQL Information Exposure in GraphiQL support
CVE-2026-59287
SF
Spring For Graphql
Vmware
5.9
0%
Aug 27Spring for GraphQL WebSocket Client Denial of Service
CVE-2026-59286
SF
Spring For Graphql
Vmware
8.1
0%
Aug 27Spring for GraphQL loads Untrusted Resources in GraphiQL support
CVE-2026-59285
SF
Spring For Graphql
Vmware
8.1
0%
Aug 27Spring for GraphQL Unsafe Deserialization in pagination support
CVE-2026-59283
SF
Spring Framework
Vmware
9.1
1%
Aug 27Spring Framework Safety Guard Bypass via SpEL Expression Compilation
CVE-2026-59282
SF
Spring Framework
Vmware
7.5
0%
Aug 27Spring Framework Denial of Service via Unbounded List Growth in Data Binding
CVE-2026-59281
SF
Spring Framework
Vmware
6.1
0%
Aug 27Spring Framework Cross-site Scripting via EscapedErrors
CVE-2026-59277
SS
Spring Security
Vmware
5.3
0%
Aug 27Spring Security InetAddressMatchers Incomplete Internal Network Classification
CVE-2026-59276
SS
Spring Security
Vmware
5.9
0%
Aug 27Timing Attack via Non-Constant-Time Comparison of Sensitive Values
CVE-2026-59280
SF
Spring Framework
Vmware
4.3
0%
Aug 27Spring Framework Path Traversal via Backslash in SpringTemplateLoader
CVE-2026-59272
SA
Spring Advanced Message Queuing Protocol
Vmware
6.8
0%
Aug 27Log4j2 AmqpAppender disables TLS hostname verification by default
CVE-2026-59355
SA
Spring Authorization Server
VMware
6.1
0%
Aug 27Spring Authorization Server: Open Redirect via request_uri parameter
CVE-2026-59354
SS
Spring Security
Vmware
8.8
0%
Aug 27Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata
CVE-2026-47893
SF
Spring Framework
Vmware
7.5
0%
Aug 27Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService
CVE-2026-47892
SF
Spring Framework
Vmware
9.8
1%
Aug 27Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints
CVE-2026-47891
SF
Spring Framework
Vmware
9.8
1%
Aug 27Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder
CVE-2026-47890
SF
Spring Framework
Vmware
9.8
1%
Aug 27Spring Framework Server Sent Event stream corruption while rendering fragments
CVE-2026-47889
SF
Spring Framework
Vmware
7.5
0%
Aug 27Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse
CVE-2026-47888
SF
Spring Framework
Vmware
7.5
0%
Aug 27Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler
CVE-2026-47887
SF
Spring Framework
Vmware
6.1
0%
Aug 27Spring Framework Open Redirect in UrlFileNameViewController
CVE-2026-47886
SF
Spring Framework
Vmware
7.5
0%
Aug 27Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions
CVE-2026-47885
SF
Spring Framework
Vmware
7.5
0%
Aug 27Spring Framework maxPartSize Ignored in PartEventHttpMessageReader
CVE-2026-47884
SF
Spring Framework
Vmware
9.8
1%
Aug 27Spring Framework Improper Path Limitation in XsltView
CVE-2026-47883
SF
Spring Framework
Vmware
6.1
0%
Aug 27Spring Framework Open Redirect in UrlHandlerFilter
CVE-2026-59278
SF
Spring For Apache Kafka
Vmware
6.5
0%
Aug 27In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages
CVE-2026-59275
SA
Spring Advanced Message Queuing Protocol
Vmware
4.9
0%
Aug 27Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99)
CVE-2026-59274
SI
Spring Integration
Vmware
6.5
0%
Aug 27Unbounded decompression in UnZipTransformer enables zip-bomb DoS
CVE-2026-59271
SA
Spring Advanced Message Queuing Protocol
Vmware
6.5
0%
Aug 27Admin password disclosed in BrokerNotAliveException message
CVE-2026-59270
SS
Spring Security
Vmware
9.1
0%
Aug 27Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces