VMSA-2012-0005:VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues

VMSA-2012-0005.4 VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, Workstation, Player, ESXi and ESX address several security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0005.4 VMware Security Advisory Synopsis: VMware vCenter Server...

VMSA-2009-0002:VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27

VMSA-2009-0002.2 VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0002.2 VMware Security Advisory Synopsis: VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27 VMware Security Advisory...

VMSA-2022-0033:VMware ESXi, Workstation, and Fusion updates address a heap out-of-bounds write vulnerability

Advisory ID: VMSA-2022-0033 CVSSv3 Range: 5.9-9.3 Issue Date:2022-12-13 Updated On: 2022-12-13 Initial Advisory CVEs: CVE-2022-31705 Synopsis: VMware ESXi, Workstation, and Fusion updates address a heap out-of-bounds write vulnerability CVE-2022-31705 RSS Feed Download PDF Download Text File Shar...

VMSA-2022-0029:VMware Tools for Windows update addresses a denial-of-service vulnerability

Advisory ID: VMSA-2022-0029 CVSSv3 Range: 3.3 Issue Date:2022-11-29 Updated On: 2022-11-29 Initial Advisory CVEs: CVE-2022-31693 Synopsis: VMware Tools for Windows update addresses a denial-of-service vulnerability CVE-2022-31693 RSS Feed Download PDF Download Text File Share this page on social...

VMware Workstation, Fusion and ESXi updates address a heap-overflow vulnerability (CVE-2021-22045)

1. Impacted Products VMware ESXi VMware Workstation Pro / Player Workstation VMware Fusion VMware Cloud Foundation 2. Introduction A heap-overflow vulnerability in VMware Workstation, Fusion and ESXi was privately reported to VMware. Updates are available to remediate this vulnerability in...

VMware ESXi and Horizon DaaS updates address OpenSLP remote code execution vulnerability (CVE-2019-5544)

1. Impacted Products VMware ESXi VMware Horizon DaaS 2. Introduction A vulnerability in OpenSLP was privately reported to VMware. Patches and workarounds are available to address this vulnerability in affected VMware products. 3. VMware ESXi and Horizon DaaS updates address OpenSLP remote code...

VMSA-2016-0013:VMware Identity Manager and vRealize Automation updates address multiple security issues

VMSA-2016-0013 VMware Identity Manager and vRealize Automation updates address multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0013 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Identity Manager and vRealiz...

VMSA-2016-0012:VMware Photon OS OVA default public ssh key

VMSA-2016-0012 VMware Photon OS OVA default public ssh key VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0012 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Photon OS OVA default public ssh key VMware Security Advisory Issue date:...

VMSA-2016-0011:vRealize Log Insight update addresses directory traversal vulnerability

VMSA-2016-0011 vRealize Log Insight update addresses directory traversal vulnerability. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0011 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: vRealize Log Insight update addresses directory...

VMSA-2012-0018:VMware security updates for vCSA, vCenter Server, and ESXi

VMSA-2012-0018.2 VMware security updates for vCSA, vCenter Server, and ESXi VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0018.2 VMware Security Advisory Synopsis: VMware security updates for vCSA, vCenter Server, and ESXi VMware Security Advisory Issue date: 2012-12-20...

VMware Hosted products update libpng and Apache HTTP Server

a. Third Party Library libpng Updated to 1.2.35Several flaws were discovered in the way third party library libpnghandled uninitialized pointers. An attacker could create a PNG imagefile in such a way, that when loaded by an application linked tolibpng, it could cause the application to crash or...

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

Advisory ID: | VMSA-2026-0004 ---|--- Advisory Severity: | Important CVSSv3 Range: | 8.0 Synopsis: | VMware Cloud Foundation Operations updates address multiple vulnerabilities CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724 Issue date: | 2026-06-08 Updated on: | 2026-06-08 Initial advisory CVE...

VMSA-2023-0008:VMware Workstation and Fusion updates address multiple security vulnerabilities

Advisory ID: VMSA-2023-0008 CVSSv3 Range: 7.3-9.3 Issue Date:2023-04-25 Updated On: 2023-04-25 Initial Advisory CVEs: CVE-2023-20869, CVE-2023-20870, CVE-2023-20871, CVE-2023-20872 Synopsis: VMware Workstation and Fusion updates address multiple security vulnerabilities CVE-2023-20869,...

VMware ESXi, Workstation and Fusion updates address side-channel analysis due to speculative execution.

Bounds-Check bypass and Branch Target Injection issues CPU data cache timing can be abused to efficiently leak information out of mis-speculated CPU execution, leading to at worst arbitrary virtual memory read vulnerabilities across local security boundaries in various contexts. Speculative...

VMSA-2016-0007:VMware NSX and vCNS product updates address a CRITICAL information disclosure vulnerability

VMSA-2016-0007.2 VMware NSX and vCNS product updates address a critical information disclosure vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0007.2 VMware Security Advisory Synopsis: VMware NSX and vCNS product updates address a critical information...

VMSA-2014-0011:VMware vSphere Data Protection product update addresses a CRITICAL information disclosure vulnerability.

VMSA-2014-0011 VMware vSphere Data Protection product update addresses a critical information disclosure vulnerability. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2014-0011 VMware Security Advisory Synopsis: VMware vSphere Data Protection product update addresses a critic...

VMSA-2023-0024:VMware Tools updates address Local Privilege Escalation and SAML Token Signature Bypass vulnerabilities

Advisory ID: VMSA-2023-0024 CVSSv3 Range: 7.1 - 7.8 Issue Date:2023-10-26 Updated On: 2023-10-26 Initial Advisory CVEs: CVE-2023-34057, CVE-2023-34058 Synopsis: VMware Tools updates address Local Privilege Escalation and SAML Token Signature Bypass vulnerabilities CVE-2023-34057, CVE-2023-34058 R...

VMSA-2023-0007:VMware Aria Operations for Logs (Operations for Logs) update addresses multiple vulnerabilities.

Advisory ID: VMSA-2023-0007.1 CVSSv3 Range: 7.2-9.8 Issue Date:2023-04-20 Updated On: 2023-07-10 CVEs: CVE-2023-20864, CVE-2023-20865 Synopsis: VMware Aria Operations for Logs Operations for Logs update addresses multiple vulnerabilities. CVE-2023-20864, CVE-2023-20865 RSS Feed Download PDF...

VMware ESX third party update for Service Console kernel

a. Service Console OS update for COS kernel packagThis patch updates the Service Console kernel to fix a stack pointer underflow issue in the 32-bit compatibility layer. Exploitation of this issue could allow a local user to gain additional privileges. The Common Vulnerabilities and Exposures...

VMSA-2008-0004:Updated e2fsprogs service console package

VMSA-2008-0004.1 Updated e2fsprogs service console package VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0004.1 VMware Security AdvisorySynopsis: Updated e2fsprogs service console package VMware Security AdvisoryIssue date: 2008-03-03 VMware Security AdvisoryUpdated on:...

VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).

3. Authentication Bypass Vulnerability CVE-2023-34060 VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5 from an older version. VMware has evaluated the severity of this issue to be in the Critical severity...

VMSA-2023-0002:VMware vRealize Operations (vROps) update addresses a CSRF bypass vulnerability

Advisory ID: VMSA-2023-0002 CVSSv3 Range: 6.5 Issue Date:2023-01-31 Updated On: 2023-01-31 Initial Advisory CVEs: CVE-2023-20856 Synopsis: VMware vRealize Operations vROps update addresses a CSRF bypass vulnerability CVE-2023-20856 RSS Feed Download PDF Download Text File Share this page on socia...

VMSA-2016-0015:VMware Horizon View updates address directory traversal vulnerability

VMSA-2016-0015 VMware Horizon View updates address directory traversal vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0015 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Horizon View updates address directory traversa...

VMware vSphere and vCOps updates to third party libraries

a. vCenter and ESX update to JRE 1.6.0 Update 31The Oracle Sun JRE is updated to version 1.6.031, which addresses multiple security issues. Oracle has documented the CVE identifiers that are addressed by this update in the Oracle Java SE Critical Patch Update Advisory of February 2012.Column 4 of...

VMSA-2009-0004:ESX Service Console updates for openssl, bind, and vim

VMSA-2009-0004.3 ESX Service Console updates for openssl, bind, and vim VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0004.3 VMware Security Advisory Synopsis: ESX Service Console updates for openssl, bind, and vim VMware Security Advisory Issue date: 2009-03-31 VMware...

VMSA-2023-0021:VMware Aria Operations for Logs updates address multiple vulnerabilities.

Advisory ID: VMSA-2023-0021 CVSSv3 Range: 8.1 Issue Date:2023-10-19 Updated On: 2023-10-23 CVEs: CVE-2023-34051, CVE-2023-34052 Synopsis: VMware Aria Operations for Logs updates address multiple vulnerabilities. CVE-2023-34051, CVE-2023-34052 RSS Feed Download PDF Download Text File Share this pa...

VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities

3. Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816, CVE-2022-23825 vulnerabilities VMware ESXi contains Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816,...

VMSA-2010-0017:VMware ESX third party update for Service Console kernel

VMSA-2010-0017.1 VMware ESX third party update for Service Console kernel VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0017.1 VMware Security Advisory Synopsis: VMware ESX third party update for Service Console kernel VMware Security Advisory Issue date: 2010-11-29...

VMSA-2010-0007:VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

VMSA-2010-0007.1 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0007.1 VMware Security Advisory Synopsis: VMware hosted products, vCenter Server and ESX patches resolve multiple...

VMSA-2010-0002:VMware vCenter update release addresses multiple security issues in Java JRE

VMSA-2010-0002.4 VMware vCenter update release addresses multiple security issues in Java JRE VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0002.4 VMware Security Advisory Synopsis: VMware vCenter update release addresses multiple security issues in Java JRE VMware...

VMSA-2009-0009:ESX Service Console updates for udev, sudo, and curl

VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0009 VMware Security Advisory Synopsis: ESX Service Console updates for udev, sudo, and curl VMware Security Advisory Issue date: 2009-07-10 VMware Security...

VMSA-2019-0014:VMware ESXi, Workstation, Fusion, VMRC and Horizon Client updates address use-after-free and denial of service vulnerabilities.

VMware Security Advisories Advisory ID| VMSA-2019-0014.1 ---|--- Advisory Severity| Important CVSSv3 Range| 4.7-8.5 Synopsis| VMware ESXi, Workstation, Fusion, VMRC and Horizon Client updates address use-after-free and denial of service vulnerabilities. CVE-2019-5527, CVE-2019-5535 Issue Date|...

VMSA-2012-0015:VMware Hosted Products and OVF Tool address security issues

VMSA-2012-0015 VMware Hosted Products and OVF Tool address security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0015 VMware Security Advisory Synopsis: VMware Hosted Products and OVF Tool address security issues VMware Security Advisory Issue date: 2012-11-08...

VMSA-2011-0008:VMware vCenter Server and vSphere Client security vulnerabilities

VMSA-2011-0008 VMware vCenter Server and vSphere Client security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0008 VMware Security Advisory Synopsis: VMware vCenter Server and vSphere Client security vulnerabilities VMware Security Advisory Issue date:...

VMSA-2010-0015:VMware ESX third party updates for Service Console

VMSA-2010-0015.1 VMware ESX third party updates for Service Console VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0015.1 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console VMware Security Advisory Issue date: 2010-09-30 VMware Security...

VMware Carbon Black App Control update addresses multiple vulnerabilities (CVE-2022-22951, CVE-2022-22952)

3a. OS command injection vulnerability in VMware Carbon Black App Control CVE-2022-22951 VMware Carbon Black App Control contains an OS command injection vulnerability. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.1. 3b...

VMware Carbon Black Cloud Workload appliance update addresses incorrect URL handling vulnerability (CVE-2021-21982)

3. Advisory Details A URL on the administrative interface of the VMware Carbon Black Cloud Workload appliance can be manipulated to bypass authentication. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.1...

VMware vSphere, Workstation and Fusion updates enable Hypervisor-Assisted Guest Mitigations for Speculative Store Bypass issue.

vCenter Server, ESXi, Workstation, and Fusion update speculative execution control mechanism for Virtual Machines VMs. As a result, a patched Guest Operating System GOS can remediate the Speculative Store bypass issue CVE-2018-3639 using the Speculative-Store-Bypass-Disable SSBD control bit. This...

VMSA-2013-0013:VMware Workstation host privilege escalation vulnerability

VMSA-2013-0013 VMware Workstation host privilege escalation vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0013 VMware Security Advisory Synopsis: VMware Workstation host privilege escalation vulnerability VMware Security Advisory Issue date: 2013-11-14...

VMSA-2008-0019:VMware Hosted products and patches for ESX and ESXi resolve a CRITICAL security issue and update bzip2

VMSA-2008-0019.1 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2008-0019.1 VMware Security Advisory Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...

VMSA-2022-0034:VMware vRealize Operations (vROps) updates address privilege escalation vulnerabilities

Advisory ID: VMSA-2022-0034 CVSSv3 Range: 4.4-7.2 Issue Date:2022-12-15 Updated On: 2022-12-15 Initial Advisory CVEs: CVE-2022-31707, CVE-2022-31708 Synopsis: VMware vRealize Operations vROps updates address privilege escalation vulnerabilities CVE-2022-31707, CVE-2022-31708 RSS Feed Download PDF...

VMware Horizon Client for Linux update addresses multiple vulnerabilities (CVE-2022-22962, CVE-2022-22964)

1. Impacted Products VMware Horizon Agent for Linux 2. Introduction Multiple vulnerabilities in VMware Horizon Agent for Linux were privately reported to VMware. Updates are available to remediate these vulnerabilities in affected VMware products. 3a. User-controlled folder path customization...

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

1. Impacted Products Under Evaluation VMware Horizon VMware vCenter Server VMware HCX VMware NSX-T Data Center VMware Unified Access Gateway VMware WorkspaceOne Access VMware Identity Manager VMware vRealize Operations VMware vRealize Operations Cloud Proxy VMware vRealize Automation VMware...

VMware product updates address OpenSSL security vulnerabilities

a. OpenSSL update for multiple products. OpenSSL libraries have been updated in multiple products to versions 0.9.8za and 1.0.1h in order to resolve multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2014-0224, CVE-2014-0198,...

VMSA-2008-0016:VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues

VMSA-2008-0016.3 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0016.3 VMware Security AdvisorySynopsis: VMware Hosted products, VirtualCenter Update 3 and patches...

VMware Workspace ONE Access, Access Connector, Identity Manager, Identity Manager Connector and vRealize Automation updates address multiple vulnerabilities.

3a. Authentication Bypass Vulnerability CVE-2022-31656 VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. VMware has evaluated the severity of this issue to be in the Critical severity range with a...

VMSA-2020-0005:VMware Workstation, Fusion, VMware Remote Console and Horizon Client updates address privilege escalation and denial-of-service vulnerabilities

Advisory ID: VMSA-2020-0005.2 CVSSv3 Range: 3.2-7.3 Issue Date:2020-03-17 Updated On: 2020-03-24 CVEs: CVE-2020-3950, CVE-2020-3951 Synopsis: VMware Workstation, Fusion, VMware Remote Console and Horizon Client updates address privilege escalation and denial-of-service vulnerabilities...

VMSA-2011-0004:VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm.

VMSA-2011-0004.3 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0004.3 VMware Security Advisory Synopsis: VMware ESX/ESXi SLPD denial of...

VMSA-2009-0013:VMware Fusion resolves two security issues

VMSA-2009-0013 VMware Fusion resolves two security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0013 VMware Security Advisory Synopsis: VMware Fusion resolves two security issues VMware Security Advisory Issue date: 2009-10-01 VMware Security Advisory Updated on...