VMware / Broadcom
Security news, advisories and exploited vulnerabilities.
News stories · 30d
3
Advisories · 30d
0
Added to KEV · 90d
1
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-08-18 | CVE-2026-59310 | VMware vCenter | Broadcom VMware vCenter Path Traversal Vulnerability | Known |
| 2026-03-03 | CVE-2026-22719 | VMware Aria Operations | Broadcom VMware Aria Operations Command Injection Vulnerability | |
| 2026-01-23 | CVE-2024-37079 | VMware vCenter Server | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability | |
| 2025-10-30 | CVE-2025-41244 | VMware Aria Operations and VMware Tools | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability | |
| 2025-04-28 | CVE-2025-1976 | Brocade Fabric OS | Broadcom Brocade Fabric OS Code Injection Vulnerability | |
| 2025-03-04 | CVE-2025-22226 | ESXi, Workstation, and Fusion | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability | |
| 2025-03-04 | CVE-2025-22225 | ESXi | VMware ESXi Arbitrary Write Vulnerability | Known |
| 2025-03-04 | CVE-2025-22224 | ESXi and Workstation | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability | |
| 2024-11-20 | CVE-2024-38813 | vCenter Server | VMware vCenter Server Privilege Escalation Vulnerability | |
| 2024-11-20 | CVE-2024-38812 | vCenter Server | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | |
| 2024-07-30 | CVE-2024-37085 | ESXi | VMware ESXi Authentication Bypass Vulnerability | Known |
| 2024-07-17 | CVE-2022-22948 | vCenter Server | VMware vCenter Server Incorrect Default File Permissions Vulnerability | |
| 2024-01-22 | CVE-2023-34048 | vCenter Server | VMware vCenter Server Out-of-Bounds Write Vulnerability | |
| 2023-06-23 | CVE-2023-20867 | Tools | VMware Tools Authentication Bypass Vulnerability | |
| 2023-06-22 | CVE-2023-20887 | Aria Operations for Networks | Vmware Aria Operations for Networks Command Injection Vulnerability | |
| 2022-08-25 | CVE-2022-22963 | Spring Cloud | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | |
| 2022-05-16 | CVE-2022-22947 | Spring Cloud Gateway | VMware Spring Cloud Gateway Code Injection Vulnerability | |
| 2022-04-15 | CVE-2022-22960 | Multiple Products | VMware Multiple Products Privilege Escalation Vulnerability | |
| 2022-04-14 | CVE-2022-22954 | Workspace ONE Access and Identity Manager | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | Known |
| 2022-04-04 | CVE-2022-22965 | Spring Framework | Spring Framework JDK 9+ Remote Code Execution Vulnerability | |
| 2022-03-25 | CVE-2020-5410 | Spring Cloud Configuration (Config) Server | VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability | |
| 2022-03-25 | CVE-2018-6961 | SD-WAN Edge | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | |
| 2022-03-25 | CVE-2018-1273 | Spring Data Commons | VMware Tanzu Spring Data Commons Property Binder Vulnerability | Known |
| 2022-03-07 | CVE-2021-21973 | vCenter Server and Cloud Foundation | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability | |
| 2022-01-18 | CVE-2021-21975 | vRealize Operations Manager API | VMware Server Side Request Forgery in vRealize Operations Manager API | Known |
Timeline (last 30 days)
- Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers — The Hacker News, 2026-10-19
- 16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password — Security Affairs +1 sources, 2026-10-19
- VMware is pushing so many patches, it thinks users need new tools to manage the flood — The Register, 2026-10-13