CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2024-37079link is external Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability This type of vulnerability is a frequent attack vector for malicious...

9.8CVSS5.5AI score0.82045EPSS

In wildExploits0References6

CISA KEV Catalog•added 2026/01/23 12:0 a.m.•20 views

Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution...

9.8CVSS6.1AI score0.82045EPSS

In wildExploits0

RedHat Linux•added 2026/01/21 10:12 a.m.•1 views

kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

5.9AI score0.00082EPSS

Exploits0References5

Chainguard•added 2026/01/20 1:17 p.m.•3 views

GHSA-QHR5-5M4Q-73P8 vulnerabilities

Vulnerabilities for packages: linux-vmware...

5.3AI score

Exploits0

Chainguard•added 2026/01/20 1:17 p.m.•12 views

CVE-2025-21949 vulnerabilities

Vulnerabilities for packages: linux-vmware...

5.5CVSS6.7AI score0.00025EPSS

Exploits0

Chainguard•added 2026/01/20 1:17 p.m.•3 views

GHSA-JX2M-WGQ5-5QCJ vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-qemu...

5.4AI score

Exploits0

Tenable Nessus•added 2026/01/20 12:0 a.m.•4 views

MiracleLinux 9 : ignition-2.14.0-1.el9 (AXSA:2023-4920:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-4920:01 advisory. ignition: configs are accessible from unprivileged containers in VMs running on VMware products CVE-2022-1706 Tenable has extracted the preceding description...

6.5CVSS5.6AI score0.00592EPSS

Exploits0References2

OSV•added 2026/01/19 3:9 p.m.•7 views

CLSA-2026-1768775579 kernel: Fix of 49 CVEs

scsi: ses: Fix slab-out-of-bounds in sesenclosuredataprocess CVE-2023-53803 - md/raid1: Fix stack memory use after return in raid1reshape CVE-2025-38445 - ALSA: usb-audio: Fix out-of-bounds read in sndusbgetaudioformatuac3 CVE-2025-38249 - atm: clip: Fix infinite recursive call of clippush...

7.8CVSS7.2AI score0.00081EPSS

Exploits0References1

Tenable Nessus•added 2026/01/19 12:0 a.m.•3 views

MiracleLinux 9 : open-vm-tools-12.3.5-2.el9 (AXBA:2024-8096:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXBA:2024-8096:03 advisory. - VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges...

7.5CVSS6.1AI score0.00078EPSS

Exploits0References3

Chainguard•added 2026/01/14 1:17 a.m.•2 views

GHSA-JCH8-HV9X-VVC6 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-vmware, linux-gcp, linux-qemu...

5.2AI score

Exploits0

Chainguard•added 2026/01/14 1:17 a.m.•6 views

CVE-2025-39910 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-vmware, linux-gcp, linux-qemu...

5.5CVSS5.5AI score0.00016EPSS

Exploits0