VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

Advisory ID: | VMSA-2025-0015.1 ---|--- Advisory Severity: | Important CVSSv3 Range: | 4.9 -7.8 Synopsis: | VMware Aria Operations and VMware Tools updates address multiple vulnerabilities CVE-2025-41244,CVE-2025-41245, CVE-2025-41246 Issue date: | 2025-09-29 Updated on: | 2025-10-30 CVEs |...

VMware Response to Spring Framework Remote Code Execution Vulnerability (CVE-2022-22965)

IMPORTANT See the Notes section if prior to April 6, 3 PM PST you have updated TAS or Ops Manager or you have applied workarounds to TAS, Ops Manager or TKGi. 1. Impacted Products VMware Tanzu Application Service for VMs TAS VMware Tanzu Operations Manager Ops Manager VMware Tanzu Kubernetes Grid...

VMSA-2022-0005:VMware NSX Data Center for vSphere update addresses CLI shell injection vulnerability

Advisory ID: VMSA-2022-0005.2 CVSSv3 Range: 8.8 Issue Date:2022-02-15 Updated On: 2022-04-07 CVEs: CVE-2022-22945 Synopsis: VMware NSX Data Center for vSphere update addresses CLI shell injection vulnerability CVE-2022-22945 RSS Feed Download PDF Download Text File Share this page on social media...

VMSA-2016-0013:VMware Identity Manager and vRealize Automation updates address multiple security issues

VMSA-2016-0013 VMware Identity Manager and vRealize Automation updates address multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0013 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Identity Manager and vRealiz...

VMSA-2015-0008:VMware product updates address information disclosure issue.

VMSA-2015-0008.2 VMware product updates address information disclosure issue. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2015-0008.2 VMware Security AdvisorySynopsis: VMware product updates address information disclosure issue. VMware Security AdvisoryIssue date: 2015-11-1...

VMSA-2012-0018:VMware security updates for vCSA, vCenter Server, and ESXi

VMSA-2012-0018.2 VMware security updates for vCSA, vCenter Server, and ESXi VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0018.2 VMware Security Advisory Synopsis: VMware security updates for vCSA, vCenter Server, and ESXi VMware Security Advisory Issue date: 2012-12-20...

VMSA-2012-0005:VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues

VMSA-2012-0005.4 VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, Workstation, Player, ESXi and ESX address several security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0005.4 VMware Security Advisory Synopsis: VMware vCenter Server...

VMSA-2022-0029:VMware Tools for Windows update addresses a denial-of-service vulnerability

Advisory ID: VMSA-2022-0029 CVSSv3 Range: 3.3 Issue Date:2022-11-29 Updated On: 2022-11-29 Initial Advisory CVEs: CVE-2022-31693 Synopsis: VMware Tools for Windows update addresses a denial-of-service vulnerability CVE-2022-31693 RSS Feed Download PDF Download Text File Share this page on social...

VMSA-2013-0015:VMware ESX updates to third party libraries

VMSA-2013-0015 VMware ESX updates to third party libraries VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0015 VMware Security Advisory Synopsis: VMware ESX updates to third party libraries VMware Security Advisory Issue date: 2013-12-05 VMware Security Advisory Updated...

VMSA-2009-0010:VMware Hosted products update libpng and Apache HTTP Server

VMSA-2009-0010.1 VMware Hosted products update libpng and Apache HTTP Server VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0010.1 VMware Security Advisory Synopsis: VMware Hosted products update libpng and Apache HTTP Server VMware Security Advisory Issue date: 2009-08-...

VMSA-2009-0002:VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27

VMSA-2009-0002.2 VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0002.2 VMware Security Advisory Synopsis: VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27 VMware Security Advisory...

VMSA-2023-0007:VMware Aria Operations for Logs (Operations for Logs) update addresses multiple vulnerabilities.

Advisory ID: VMSA-2023-0007.1 CVSSv3 Range: 7.2-9.8 Issue Date:2023-04-20 Updated On: 2023-07-10 CVEs: CVE-2023-20864, CVE-2023-20865 Synopsis: VMware Aria Operations for Logs Operations for Logs update addresses multiple vulnerabilities. CVE-2023-20864, CVE-2023-20865 RSS Feed Download PDF...

VMware ESXi and Horizon DaaS updates address OpenSLP remote code execution vulnerability (CVE-2019-5544)

1. Impacted Products VMware ESXi VMware Horizon DaaS 2. Introduction A vulnerability in OpenSLP was privately reported to VMware. Patches and workarounds are available to address this vulnerability in affected VMware products. 3. VMware ESXi and Horizon DaaS updates address OpenSLP remote code...

VMware ESXi, Workstation and Fusion updates address side-channel analysis due to speculative execution.

Bounds-Check bypass and Branch Target Injection issues CPU data cache timing can be abused to efficiently leak information out of mis-speculated CPU execution, leading to at worst arbitrary virtual memory read vulnerabilities across local security boundaries in various contexts. Speculative...

VMSA-2016-0012:VMware Photon OS OVA default public ssh key

VMSA-2016-0012 VMware Photon OS OVA default public ssh key VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0012 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Photon OS OVA default public ssh key VMware Security Advisory Issue date:...

VMSA-2016-0011:vRealize Log Insight update addresses directory traversal vulnerability

VMSA-2016-0011 vRealize Log Insight update addresses directory traversal vulnerability. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0011 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: vRealize Log Insight update addresses directory...

VMSA-2014-0011:VMware vSphere Data Protection product update addresses a CRITICAL information disclosure vulnerability.

VMSA-2014-0011 VMware vSphere Data Protection product update addresses a critical information disclosure vulnerability. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2014-0011 VMware Security Advisory Synopsis: VMware vSphere Data Protection product update addresses a critic...

VMware Hosted products update libpng and Apache HTTP Server

a. Third Party Library libpng Updated to 1.2.35Several flaws were discovered in the way third party library libpnghandled uninitialized pointers. An attacker could create a PNG imagefile in such a way, that when loaded by an application linked tolibpng, it could cause the application to crash or...

VMSA-2023-0021:VMware Aria Operations for Logs updates address multiple vulnerabilities.

Advisory ID: VMSA-2023-0021 CVSSv3 Range: 8.1 Issue Date:2023-10-19 Updated On: 2023-10-23 CVEs: CVE-2023-34051, CVE-2023-34052 Synopsis: VMware Aria Operations for Logs updates address multiple vulnerabilities. CVE-2023-34051, CVE-2023-34052 RSS Feed Download PDF Download Text File Share this pa...

VMware Workstation, Fusion and ESXi updates address a heap-overflow vulnerability (CVE-2021-22045)

1. Impacted Products VMware ESXi VMware Workstation Pro / Player Workstation VMware Fusion VMware Cloud Foundation 2. Introduction A heap-overflow vulnerability in VMware Workstation, Fusion and ESXi was privately reported to VMware. Updates are available to remediate this vulnerability in...

VMSA-2016-0007:VMware NSX and vCNS product updates address a CRITICAL information disclosure vulnerability

VMSA-2016-0007.2 VMware NSX and vCNS product updates address a critical information disclosure vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0007.2 VMware Security Advisory Synopsis: VMware NSX and vCNS product updates address a critical information...

VMSA-2008-0004:Updated e2fsprogs service console package

VMSA-2008-0004.1 Updated e2fsprogs service console package VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0004.1 VMware Security AdvisorySynopsis: Updated e2fsprogs service console package VMware Security AdvisoryIssue date: 2008-03-03 VMware Security AdvisoryUpdated on:...

VMSA-2023-0002:VMware vRealize Operations (vROps) update addresses a CSRF bypass vulnerability

Advisory ID: VMSA-2023-0002 CVSSv3 Range: 6.5 Issue Date:2023-01-31 Updated On: 2023-01-31 Initial Advisory CVEs: CVE-2023-20856 Synopsis: VMware vRealize Operations vROps update addresses a CSRF bypass vulnerability CVE-2023-20856 RSS Feed Download PDF Download Text File Share this page on socia...

VMSA-2025-0005: VMware Tools for Windows update addresses an authentication bypass vulnerability (CVE-2025-22230)

Advisory ID: | VMSA-2025-0005 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.8 Synopsis: | VMware Tools for Windows update addresses an authentication bypass vulnerability CVE-2025-22230 Issue date: | 2025-03-25 Updated on: | 2025-03-25 Initial Advisory CVEs | CVE-2025-22230 1. Impacted...

VMSA-2016-0015:VMware Horizon View updates address directory traversal vulnerability

VMSA-2016-0015 VMware Horizon View updates address directory traversal vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0015 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Horizon View updates address directory traversa...

VMware vSphere and vCOps updates to third party libraries

a. vCenter and ESX update to JRE 1.6.0 Update 31The Oracle Sun JRE is updated to version 1.6.031, which addresses multiple security issues. Oracle has documented the CVE identifiers that are addressed by this update in the Oracle Java SE Critical Patch Update Advisory of February 2012.Column 4 of...

VMware ESX third party update for Service Console kernel

a. Service Console OS update for COS kernel packagThis patch updates the Service Console kernel to fix a stack pointer underflow issue in the 32-bit compatibility layer. Exploitation of this issue could allow a local user to gain additional privileges. The Common Vulnerabilities and Exposures...

VMSA-2010-0015:VMware ESX third party updates for Service Console

VMSA-2010-0015.1 VMware ESX third party updates for Service Console VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0015.1 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console VMware Security Advisory Issue date: 2010-09-30 VMware Security...

VMSA-2010-0007:VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

VMSA-2010-0007.1 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0007.1 VMware Security Advisory Synopsis: VMware hosted products, vCenter Server and ESX patches resolve multiple...

VMSA-2009-0009:ESX Service Console updates for udev, sudo, and curl

VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0009 VMware Security Advisory Synopsis: ESX Service Console updates for udev, sudo, and curl VMware Security Advisory Issue date: 2009-07-10 VMware Security...

VMSA-2009-0004:ESX Service Console updates for openssl, bind, and vim

VMSA-2009-0004.3 ESX Service Console updates for openssl, bind, and vim VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0004.3 VMware Security Advisory Synopsis: ESX Service Console updates for openssl, bind, and vim VMware Security Advisory Issue date: 2009-03-31 VMware...

VMSA-2008-0019:VMware Hosted products and patches for ESX and ESXi resolve a CRITICAL security issue and update bzip2

VMSA-2008-0019.1 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2008-0019.1 VMware Security Advisory Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...

VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).

3. Authentication Bypass Vulnerability CVE-2023-34060 VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5 from an older version. VMware has evaluated the severity of this issue to be in the Critical severity...

VMware Carbon Black App Control update addresses multiple vulnerabilities (CVE-2022-22951, CVE-2022-22952)

3a. OS command injection vulnerability in VMware Carbon Black App Control CVE-2022-22951 VMware Carbon Black App Control contains an OS command injection vulnerability. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.1. 3b...

VMware Carbon Black Cloud Workload appliance update addresses incorrect URL handling vulnerability (CVE-2021-21982)

3. Advisory Details A URL on the administrative interface of the VMware Carbon Black Cloud Workload appliance can be manipulated to bypass authentication. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.1...

VMSA-2019-0014:VMware ESXi, Workstation, Fusion, VMRC and Horizon Client updates address use-after-free and denial of service vulnerabilities.

VMware Security Advisories Advisory ID| VMSA-2019-0014.1 ---|--- Advisory Severity| Important CVSSv3 Range| 4.7-8.5 Synopsis| VMware ESXi, Workstation, Fusion, VMRC and Horizon Client updates address use-after-free and denial of service vulnerabilities. CVE-2019-5527, CVE-2019-5535 Issue Date|...

VMSA-2011-0008:VMware vCenter Server and vSphere Client security vulnerabilities

VMSA-2011-0008 VMware vCenter Server and vSphere Client security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0008 VMware Security Advisory Synopsis: VMware vCenter Server and vSphere Client security vulnerabilities VMware Security Advisory Issue date:...

VMSA-2010-0017:VMware ESX third party update for Service Console kernel

VMSA-2010-0017.1 VMware ESX third party update for Service Console kernel VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0017.1 VMware Security Advisory Synopsis: VMware ESX third party update for Service Console kernel VMware Security Advisory Issue date: 2010-11-29...

VMSA-2010-0002:VMware vCenter update release addresses multiple security issues in Java JRE

VMSA-2010-0002.4 VMware vCenter update release addresses multiple security issues in Java JRE VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0002.4 VMware Security Advisory Synopsis: VMware vCenter update release addresses multiple security issues in Java JRE VMware...

VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities

3. Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816, CVE-2022-23825 vulnerabilities VMware ESXi contains Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816,...

VMSA-2020-0005:VMware Workstation, Fusion, VMware Remote Console and Horizon Client updates address privilege escalation and denial-of-service vulnerabilities

Advisory ID: VMSA-2020-0005.2 CVSSv3 Range: 3.2-7.3 Issue Date:2020-03-17 Updated On: 2020-03-24 CVEs: CVE-2020-3950, CVE-2020-3951 Synopsis: VMware Workstation, Fusion, VMware Remote Console and Horizon Client updates address privilege escalation and denial-of-service vulnerabilities...

VMSA-2012-0015:VMware Hosted Products and OVF Tool address security issues

VMSA-2012-0015 VMware Hosted Products and OVF Tool address security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0015 VMware Security Advisory Synopsis: VMware Hosted Products and OVF Tool address security issues VMware Security Advisory Issue date: 2012-11-08...

VMSA-2008-0016:VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues

VMSA-2008-0016.3 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0016.3 VMware Security AdvisorySynopsis: VMware Hosted products, VirtualCenter Update 3 and patches...

VMSA-2024-0007:VMware Cloud Director updates address a partial information disclosure vulnerability (CVE-2024-22256)

Advisory ID: | VMSA-2024-0007 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.3 Synopsis: | VMware Cloud Director updates address a partial information disclosure vulnerability CVE-2024-22256. Issue date: | 07 Mar 2024 Updated on: | 07 Mar 2024 Initial Advisory CVEs | CVE-2024-22256 1...

VMSA-2013-0013:VMware Workstation host privilege escalation vulnerability

VMSA-2013-0013 VMware Workstation host privilege escalation vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0013 VMware Security Advisory Synopsis: VMware Workstation host privilege escalation vulnerability VMware Security Advisory Issue date: 2013-11-14...

VMSA-2009-0013:VMware Fusion resolves two security issues

VMSA-2009-0013 VMware Fusion resolves two security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0013 VMware Security Advisory Synopsis: VMware Fusion resolves two security issues VMware Security Advisory Issue date: 2009-10-01 VMware Security Advisory Updated on...

VMSA-2022-0034:VMware vRealize Operations (vROps) updates address privilege escalation vulnerabilities

Advisory ID: VMSA-2022-0034 CVSSv3 Range: 4.4-7.2 Issue Date:2022-12-15 Updated On: 2022-12-15 Initial Advisory CVEs: CVE-2022-31707, CVE-2022-31708 Synopsis: VMware vRealize Operations vROps updates address privilege escalation vulnerabilities CVE-2022-31707, CVE-2022-31708 RSS Feed Download PDF...

VMware Workspace ONE Access, Access Connector, Identity Manager, Identity Manager Connector and vRealize Automation updates address multiple vulnerabilities.

3a. Authentication Bypass Vulnerability CVE-2022-31656 VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. VMware has evaluated the severity of this issue to be in the Critical severity range with a...

VMware Horizon Client for Linux update addresses multiple vulnerabilities (CVE-2022-22962, CVE-2022-22964)

1. Impacted Products VMware Horizon Agent for Linux 2. Introduction Multiple vulnerabilities in VMware Horizon Agent for Linux were privately reported to VMware. Updates are available to remediate these vulnerabilities in affected VMware products. 3a. User-controlled folder path customization...