CVE-2026-59310

CVE-2026-59310 is a VMware vCenter directory-traversal vulnerability in the Syslog server that, with network access, could allow an attacker to execute arbitrary code. The connected documents confirm: (1) root cause is directory traversal in the Syslog service, enabling code execution on vulnerab...

CVE-2023-20892

VMware vCenter Server is affected by CVE-2023-20892, a DCERPC-based heap overflow in the remote procedure call handling. Talos’ TALOS-2023-1801 report confirms a heap overflow in the DCERPC call processing of vCenter Server 7.0.3.01000 (and related components such as vmcad, vmdird, vmafdd) that c...

CVE-2022-31680

CVE-2022-31680 is a VMware vCenter Server Platform Services Controller unsafe deserialization vulnerability (PSC data handler). A post-authentication attacker with admin credentials can craft a Base64-encoded constraint object sent to /psc/data/constraint, leading to arbitrary code execution on t...

CVE-2023-20894

CVE-2023-20894 is a DCERPC-related out-of-bounds write vulnerability in VMware vCenter Server. Cisco Talos and VMware describe a memory corruption flaw triggered by specially crafted network packets that can lead to remote memory corruption. TALOS details root cause as improper calculation of the...

CVE-2023-20893

CVE-2023-20893 affects VMware vCenter Server via a DCERPC use-after-free in the vCenter RPC stack. Talos documents a remote, network-exploitable condition on VMware vCenter Server (e.g., 7.0.3.01000) enabling memory corruption and arbitrary code execution; VMware lists VMSA-2023-0014 as the vendo...

CVE-2023-20895

CVE-2023-20895 is a memory corruption vulnerability in VMware vCenter Server’s DCERPC implementation that can lead to an authentication bypass via crafted network packets. Cisco Talos reports it affects VMware vCenter Server 8.0.0.10200 and details root causes such as out-of-bounds memory access ...