VMSA-2019-0001:VMware product updates resolve mishandled file descriptor vulnerability in runc container runtime.

VMSA-2019-0001.3 VMware product updates resolve mishandled file descriptor vulnerability in runc container runtime. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2019-0001.3 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware product update...

VMSA-2015-0006:VMware vCenter Server updates address a LDAP certificate validation issue

VMSA-2015-0006.1 VMware vCenter Server updates address a LDAP certificate validation issue VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2015-0006.1 VMware Security AdvisorySynopsis: VMware vCenter Server updates address a LDAP certificate validation issue VMware Security...

VMSA-2013-0004:VMware ESXi and ESX security update for third party library

VMSA-2013-0004.3 VMware ESXi and ESX security update for third party library VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0004.3 VMware Security Advisory Synopsis: VMware ESXi and ESX security update for third party library VMware Security Advisory Issue date: 2013-03-...

VMware View privilege escalation and cross-site scripting

a. VMware Virtual Desktop Display Driver Privilege EscalationThe VMware XPDM and WDDM display drivers contain buffer overflow vulnerabilities and the XPDM display driver does not properly check for NULL pointers. Exploitation of these issues may lead to local privilege escalation on View virtual...

VMSA-2009-0001:ESX patches address an issue loading corrupt virtual disks and update Service Console packages

VMSA-2009-0001.1 ESX patches address an issue loading corrupt virtual disks and update Service Console packages VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0001.1 VMware Security Advisory Synopsis: ESX patches address an issue loading corrupt virtual disks and update...

VMSA-2008-0007:MEDIUM Updated Service Console packages pcre, net-snmp, and OpenPegasus

VMSA-2008-0007.2 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0007.2 VMware Security AdvisorySynopsis: Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security...

VMSA-2024-0004:VMware Aria Operations updates address local privilege escalation vulnerability (CVE-2024-22235)

Advisory ID: | VMSA-2024-0004 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 6.7 Synopsis: | VMware Aria Operations updates address local privilege escalation vulnerability. CVE-2024-22235 Issue date: | 2024-02-20 Updated on: | 2024-02-20 Initial Advisory CVEs | CVE-2024-22235 1. Impacted...

VMSA-2022-0027:VMware Cloud Foundation updates address multiple vulnerabilities

Advisory ID: VMSA-2022-0027.2 CVSSv3 Range: 5.3-9.8 Issue Date:2022-10-25 Updated On: 2023-03-09 CVEs: CVE-2021-39144, CVE-2022-31678 Synopsis: VMware Cloud Foundation updates address multiple vulnerabilities. RSS Feed Download PDF Download Text File Share this page on social media: 1. Impacted...

VMSA-2022-0019:VMware vRealize Log Insight contains multiple stored cross-site scripting vulnerabilities

Advisory ID: VMSA-2022-0019 CVSSv3 Range: 3.9 Issue Date:2022-07-12 Updated On: 2022-07-12 Initial Advisory CVEs: CVE-2022-31654, CVE-2022-31655 Synopsis: VMware vRealize Log Insight contains multiple stored cross-site scripting vulnerabilities RSS Feed Download PDF Download Text File Share this...

Horizon 6, 7, and Horizon Client for Windows updates address an out-of-bounds read vulnerability

Out-of-bounds read vulnerability in the Message Framework library Horizon 6, 7, Horizon Agent, and Horizon Client for Windows contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from ...

VMSA-2010-0013:VMware ESX third party updates for Service Console

VMSA-2010-0013.3 VMware ESX third party updates for Service Console VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0013.3 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console VMware Security Advisory Issue date: 2010-08-31 VMware Security...

VMSA-2023-0010:NSX-T update addresses cross-site scripting vulnerability

Advisory ID: VMSA-2023-0010 CVSSv3 Range: 4.3 Issue Date:2023-05-23 Updated On: 2023-05-23 Initial Advisory CVEs: CVE-2023-20868 Synopsis: NSX-T update addresses cross-site scripting vulnerability CVE-2023-20868 RSS Feed Download PDF Download Text File Share this page on social media: 1. Impacted...

VMSA-2022-0031:VMware vRealize Network Insight (vRNI) updates address command injection and directory traversal security vulnerabilities

Advisory ID: VMSA-2022-0031 CVSSv3 Range: 7.5-9.8 Issue Date:2022-12-13 Updated On: 2022-12-13 Initial Advisory CVEs: CVE-2022-31702, CVE-2022-31703 Synopsis: VMware vRealize Network Insight vRNI updates address command injection and directory traversal security vulnerabilities CVE-2022-31702,...

VMSA-2019-0005:VMware ESXi, Workstation and Fusion updates address multiple security issues.

VMSA-2019-0005.1 VMware ESXi, Workstation and Fusion updates address multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2019-0005 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware ESXi, Workstation and Fusion updates...

VMSA-2013-0001:VMware vSphere security updates for the authentication service and third party libraries

VMSA-2013-0001.5 VMware vSphere security updates for the authentication service and third party libraries VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0001.5 VMware Security Advisory Synopsis: VMware vSphere security updates for the authentication service and third par...

VMSA-2011-0010:VMware ESX third party updates for Service Console packages glibc and dhcp

VMSA-2011-0010.3 VMware ESX third party updates for Service Console packages glibc and dhcp VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0010.3 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console packages glibc and dhcp VMware Security...

VMware vCenter Orchestrator and Alive Enterprise remote code execution vulnerability

a. Vulnerability in third party Apache Struts componentVMware vCenter Orchestrator is an application to automate management tasks. Alive Enterprise is an application to monitor processes. Both products embed Apache Struts which is a third party component.The following vulnerability has been...

VMSA-2011-0001:VMware ESX third party updates for Service Console packages glibc, sudo, and openldap

VMSA-2011-0001.3 VMware ESX third party updates for Service Console packages glibc, sudo, and openldap VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0001.3 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console packages glibc, sudo, and...

ESXi utilities and ESX Service Console third party updates

a. Service Console update for COS kernel Updated COS package "kernel" addresses the security issues that are fixed through versions 2.6.18-164.11.1. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2009-2695, CVE-2009-2908, CVE-2009-3228, CVE-2009-3286,...

VMSA-2010-0005:VMware products address vulnerabilities in WebAccess

VMSA-2010-0005 VMware products address vulnerabilities in WebAccess VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0005 VMware Security Advisory Synopsis: VMware products address vulnerabilities in WebAccess VMware Security Advisory Issue date: 2010-03-29 VMware Security...

Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues

a. VMware Tools Local Privilege Escalation on Windows-based guest OS The VMware Tools Package provides support required for shared folders HGFS and other features. An input validation error is present in the Windows-based VMware HGFS.sys driver. Exploitation of this flaw might result in arbitrary...

VMSA-2024-0012:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-37079, CVE-2024-37080, CVE-2024-37081)

Advisory ID: | VMSA-2024-0012.1 ---|--- Severity: | Critical CVSSv3 Range: | 7.8-9.8 Synopsis: | VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities CVE-2024-37079, CVE-2024-37080, CVE-2024-37081 Issue date: | 2024-06-17 Updated on: | 2026-01-23 CVEs |...

VMware ESXi, Workstation, Fusion, VMware Remote Console and Horizon Client updates address multiple security vulnerabilities (CVE-2020-3957, CVE-2020-3958, CVE-2020-3959)

3a. Service opener - Time-of-check Time-of-use TOCTOU issue CVE-2020-3957 VMware Fusion, VMRC for Mac and Horizon Client for Mac contain a local privilege escalation vulnerability due to a Time-of-check Time-of-use TOCTOU issue in the service opener. VMware has evaluated the severity of this issu...

VMSA-2019-0004:VMware vCloud Director for Service Providers update resolves a Remote Session Hijack vulnerability

VMSA-2019-0004 VMware vCloud Director for Service Providers update resolves a Remote Session Hijack vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2019-0004 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware vCloud Director for...

VMware product updates address OpenSSL security vulnerabilities

a. OpenSSL update for multiple products. OpenSSL libraries have been updated in multiple products to versions 0.9.8za and 1.0.1h in order to resolve multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2014-0224, CVE-2014-0198,...

Updated ESXi and ESX 3.5 packages address critical security issue in openwsman

a. Updated Openwsman Openwsman is a system management platform that implements the Web Services Management protocol WS-Management. It is installed and running by default. It is used in the VMware Management Service Console and in ESXi. The openwsman 2.0.0 management service on ESX 3.5 and ESXi 3....

VMSA-2023-0011:VMware Workspace ONE Access and Identity Manager update addresses an Insecure Redirect Vulnerability.

Advisory ID: VMSA-2023-0011 CVSSv3 Range: 6.1 Issue Date:2023-05-30 Updated On: 2023-05-30 Initial Advisory CVEs: CVE-2023-20884 Synopsis: VMware Workspace ONE Access and Identity Manager update addresses an Insecure Redirect Vulnerability. CVE-2023-20884 RSS Feed Download PDF Download Text File...

VMSA-2022-0032:VMware Workspace ONE Access and Identity Manager updates address multiple vulnerabilities

Advisory ID: VMSA-2022-0032 CVSSv3 Range: 5.3-7.2 Issue Date:2022-12-13 Updated On: 2022-12-13 Initial Advisory CVEs: CVE-2022-31700, CVE-2022-31701 Synopsis: VMware Workspace ONE Access and Identity Manager updates address multiple vulnerabilities CVE-2022-31700, CVE-2022-31701. RSS Feed Downloa...

VMware Tools update addresses a local privilege escalation vulnerability (CVE-2022-31676)

3. Local privilege escalation vulnerability CVE-2022-31676 VMware Tools contains a local privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.0...

VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities

3. Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816, CVE-2022-23825 vulnerabilities VMware ESXi contains Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816,...

VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability (CVE-2020-3940)

3. VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability CVE-2020-3940 VMware Workspace ONE SDK and dependent mobile applications do not properly handle certificate verification failures if SSL Pinning has been enabled in the...

VMSA-2016-0004:VMware product updates address a CRITICAL security issue in the VMware Client Integration Plugin

VMSA-2016-0004 VMware product updates address a critical security issue in the VMware Client Integration Plugin VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0004 VMware Security Advisory Synopsis: VMware product updates address a critical security issue in the VMware...

VMware vCenter Server updates address an important reflected cross-site scripting issue

3.a Commons-collections deserialization vulnerability A deserialization vulnerability involving Apache Commons-collections and a specially constructed chain of classes exists. Successful exploitation could result in remote code execution, with the permissions of the application using the...

VMSA-2013-0011:VMware ESXi and ESX address an NFC Protocol Unhandled Exception

VMSA-2013-0011 VMware ESXi and ESX address an NFC Protocol Unhandled Exception VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0011 VMware Security Advisory Synopsis: VMware ESXi and ESX address an NFC Protocol Unhandled Exception VMware Security Advisory Issue date:...

VMware ESXi and ESX address several security issues

a. VMware ROM Overwrite Privilege Escalation A flaw in the way port-based I/O is handled allows for modifying Read-Only Memory that belongs to the Virtual DOS Machine. Exploitation of this issue may lead to privilege escalation on Guest Operating Systems that run Windows 2000, Windows XP 32-bit,...

VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

a. ESX third party update for Service Console openssl RPMThe Service Console openssl RPM is updated to openssl-0.9.8e.12.el55.7 resolving two security issues.The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2008-7270 and CVE-2010-4180 to these issues.Colum...

VMSA-2010-0011:VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.

VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0011 VMware Security Advisory Synopsis: VMware Studio 2.1 addresses security vulnerabilities in virtual...

VMSA-2009-0015:VMware hosted products and ESX patches resolve two security issues

VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0015 VMware Security Advisory Synopsis: VMware hosted products and ESX patches resolve two security issues VMware Security Advisory Issue date...

VMSA-2023-0022:VMware Fusion and Workstation updates address privilege escalation and information disclosure vulnerabilities

Advisory ID: VMSA-2023-0022 CVSSv3 Range: 6.6-7.1 Issue Date:2023-10-19 Updated On: 2023-10-19 Initial Advisory CVEs: CVE-2023-34044, CVE-2023-34045, CVE-2023-34046 Synopsis: VMware Fusion and Workstation updates address privilege escalation and information disclosure vulnerabilities...

VMSA-2020-0015:VMware Cloud Foundation, ESXi, Workstation, and Fusion updates address multiple security vulnerabilities

Advisory ID: VMSA-2020-0015.2 CVSSv3 Range: 4.0 - 9.3 Issue Date:2020-06-23 Updated On: 2020-07-02 CVEs: CVE-2020-3962, CVE-2020-3963, CVE-2020-3964, CVE-2020-3965, CVE-2020-3966, CVE-2020-3967, CVE-2020-3968, CVE-2020-3969, CVE-2020-3970, CVE-2020-3971 Synopsis: VMware Cloud Foundation, ESXi,...

VMSA-2020-0003:vRealize Operations for Horizon Adapter updates address multiple security vulnerabilities

Advisory ID: VMSA-2020-0003 CVSSv3 Range: 5.3-9.0 Issue Date:2020-02-18 Updated On: 2020-02-18 Initial Advisory CVEs: CVE-2020-3943, CVE-2020-3944, CVE-2020-3945 Synopsis: vRealize Operations for Horizon Adapter updates address multiple security vulnerabilities CVE-2020-3943, CVE-2020-3944,...

VMware product updates address critical Bash security vulnerabilities

a. Bash update for multiple products. Bash libraries have been updated in multiple products to resolve multiple critical security issues, also referred to as Shellshock.The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the identifiers CVE-2014-6271, CVE-2014-7169,...

VMware ESXi and ESX third party updates for Service Console and Likewise components

a. Service Console OS update for COS kernel This patch updates the service console kernel to fix multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2010-0415, CVE-2010-0307, CVE-2010-0291, CVE-2010-0622, CVE-2010-1087, CVE-2010-1437...

VMware Carbon Black App Control updates address an injection vulnerability (CVE-2023-20858)

3. Injection Vulnerability CVE-2023-20858 VMware Carbon Black App Control contains an injection vulnerability. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.1...

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address command injection vulnerability

3a. Command Injection Vulnerability in VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector administrative configurator CVE-2020-4006 VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a Command...

VMSA-2019-0002:VMware Workstation update addresses elevation of privilege issues.

VMSA-2019-0003 VMware Horizon update addresses Connection Server information disclosure vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2019-0003 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: VMware Horizon update addresses...

VMSA-2016-0016:vRealize Operations (vROps) updates address privilege escalation vulnerability

VMSA-2016-0016.1 vRealize Operations vROps updates address privilege escalation vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0016.1 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: vRealize Operations vROps updates address...

VMSA-2011-0005:VMware vCenter Orchestrator and Alive Enterprise remote code execution vulnerability

VMSA-2011-0005.3 VMware vCenter Orchestrator and Alive Enterprise remote code execution vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0005.3 VMware Security Advisory Synopsis: VMware vCenter Orchestrator and Alive Enterprise remote code execution...

VMware Workstation, Player, and ACE address several security issues.

a. VMware Workstation and Player installer security issueThe Workstation 7.x and Player 3.x installers will load an index.htm file located in the current working directory on which Workstation 7.x or Player 3.x is being installed. This may allow an attacker to display a malicious file if they...

VMSA-2008-0012:Updated VirtualCenter addresses User Account Disclosure Vulnerability

VMSA-2008-0012 Updated VirtualCenter addresses User Account Disclosure Vulnerability VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0012 VMware Security AdvisorySynopsis: Updated VirtualCenter addresses User Account Disclosure Vulnerability VMware Security AdvisoryIssue...