Security Digest
VMware: known exploited vulnerabilities
8 VMware CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-03-04 | CVE-2025-22226 | VMware ESXi, Workstation, and Fusion VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability | 2025-03-25 |
| 2025-03-04 | CVE-2025-22225 | VMware ESXi VMware ESXi Arbitrary Write Vulnerability Ransomware | 2025-03-25 |
| 2025-03-04 | CVE-2025-22224 | VMware ESXi and Workstation VMware ESXi and Workstation TOCTOU Race Condition Vulnerability | 2025-03-25 |
| 2024-11-20 | CVE-2024-38813 | VMware vCenter Server VMware vCenter Server Privilege Escalation Vulnerability | 2024-12-11 |
| 2024-11-20 | CVE-2024-38812 | VMware vCenter Server VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | 2024-12-11 |
| 2024-07-30 | CVE-2024-37085 | VMware ESXi VMware ESXi Authentication Bypass Vulnerability Ransomware | 2024-08-20 |
| 2024-07-17 | CVE-2022-22948 | VMware vCenter Server VMware vCenter Server Incorrect Default File Permissions Vulnerability | 2024-08-07 |
| 2024-01-22 | CVE-2023-34048 | VMware vCenter Server VMware vCenter Server Out-of-Bounds Write Vulnerability | 2024-02-12 |