VMware
31 VMware flaws are on CISA's list of vulnerabilities attackers have used, 4 of them added in 2026. CISA says 10 are known to be used by ransomware. The latest was added Oct 28, 2026.
31on CISA's list, all time
4added in 2026
2in the last 90 days
10used by ransomware
7zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| vCenter Server | 9 | Nov 20, 2024 |
| ESXi | 3 | Mar 4, 2025 |
| Multiple Products | 3 | Apr 15, 2022 |
| VMware ESX | 1 | Oct 28, 2026 |
| VMware vCenter | 1 | Aug 18, 2026 |
| VMware Aria Operations | 1 | Mar 3, 2026 |
| VMware vCenter Server | 1 | Jan 23, 2026 |
| VMware Aria Operations and VMware Tools | 1 | Oct 30, 2025 |
| ESXi and Workstation | 1 | Mar 4, 2025 |
| ESXi, Workstation, and Fusion | 1 | Mar 4, 2025 |
Latest VMware flaws
- VMware ESXBroadcom VMWare ESX Insufficient Logging Vulnerability
- VMware vCenterBroadcom VMware vCenter Path Traversal Vulnerability
- VMware Aria OperationsBroadcom VMware Aria Operations Command Injection Vulnerability
- VMware vCenter ServerBroadcom VMware vCenter Server Out-of-bounds Write Vulnerability
- VMware Aria Operations and VMware ToolsBroadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
- ESXi and WorkstationVMware ESXi and Workstation TOCTOU Race Condition Vulnerability
- ESXiVMware ESXi Arbitrary Write Vulnerability
- ESXi, Workstation, and FusionVMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
- vCenter ServerVMware vCenter Server Heap-Based Buffer Overflow Vulnerability
- vCenter ServerVMware vCenter Server Privilege Escalation Vulnerability
- ESXiVMware ESXi Authentication Bypass Vulnerability
- vCenter ServerVMware vCenter Server Incorrect Default File Permissions Vulnerability
- vCenter ServerVMware vCenter Server Out-of-Bounds Write Vulnerability
- ToolsVMware Tools Authentication Bypass Vulnerability
- Aria Operations for NetworksVmware Aria Operations for Networks Command Injection Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.