Exploited Vulnerabilities DailyVMware: known exploited vulnerabilities
Entries26No. 12
Ransomware-linked9
Products14
Latest2025-03-04
Added per year
By product
9
3
3
1
1
1
1
1
1
1
1
1
1
1
Entries
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-22226 | VMware ESXi, Workstation, and Fusion | 2025-03-04 | 1.7% | Unknown |
| CVE-2025-22225 | VMware ESXi | 2025-03-04 | 1.0% | Known |
| CVE-2025-22224 | VMware ESXi and Workstation | 2025-03-04 | 1.5% | Unknown |
| CVE-2024-38813 | VMware vCenter Server | 2024-11-20 | 17.3% | Unknown |
| CVE-2024-38812 | VMware vCenter Server | 2024-11-20 | 54.5% | Unknown |
| CVE-2024-37085 | VMware ESXi | 2024-07-30 | 26.7% | Known |
| CVE-2022-22948 | VMware vCenter Server | 2024-07-17 | 13.2% | Unknown |
| CVE-2023-34048 | VMware vCenter Server | 2024-01-22 | 99.4% | Unknown |
| CVE-2023-20867 | VMware Tools | 2023-06-23 | 13.5% | Unknown |
| CVE-2023-20887 | VMware Aria Operations for Networks | 2023-06-22 | 98.2% | Unknown |
| CVE-2022-22947 | VMware Spring Cloud Gateway | 2022-05-16 | 98.2% | Unknown |
| CVE-2022-22960 | VMware Multiple Products | 2022-04-15 | 35.5% | Unknown |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager | 2022-04-14 | 99.9% | Known |
| CVE-2022-22965 | VMware Spring Framework | 2022-04-04 | 99.6% | Unknown |
| CVE-2018-6961 | VMware SD-WAN Edge | 2022-03-25 | 86.2% | Unknown |
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation | 2022-03-07 | 88.0% | Unknown |
| CVE-2021-21975 | VMware vRealize Operations Manager API | 2022-01-18 | 78.0% | Known |
| CVE-2021-22017 | VMware vCenter Server | 2022-01-10 | 49.1% | Unknown |
| CVE-2021-22005 | VMware vCenter Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-21985 | VMware vCenter Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-21972 | VMware vCenter Server | 2021-11-03 | 99.8% | Known |
| CVE-2020-4006 | VMware Multiple Products | 2021-11-03 | 17.3% | Unknown |
| CVE-2020-3992 | VMware ESXi | 2021-11-03 | 83.0% | Known |
| CVE-2020-3952 | VMware vCenter Server | 2021-11-03 | 90.3% | Unknown |
| CVE-2020-3950 | VMware Multiple Products | 2021-11-03 | 7.2% | Unknown |
| CVE-2019-5544 | VMware VMware ESXi and Horizon DaaS | 2021-11-03 | 97.2% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
CISA KEV lists 26 VMware vulnerabilities (No. 12 of 288 vendors).