Vulnerabilidades exploradas (CISA KEV)

CVE-2026-59310 Crítica · 9.8 KEV Urgente · 77 Exploit público Ransomware CWE-22 30/07/2026

Broadcom VMware vCenter Path Traversal Vulnerability

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

CVE-2026-22719 Alta · 8.1 KEV Alta · 56 CWE-77 25/02/2026

Broadcom VMware Aria Operations Command Injection Vulnerability

VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress. To remediate CVE-2026-22719, apply the patches listed in the 'Fixed Version' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001 Workarounds for CVE-2026-22719 are documented in the 'Workarounds' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001

CVE-2025-41244 Alta · 7.8 KEV Alta · 61 Exploit público CWE-267 29/09/2025

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

CVE-2025-22224 Alta · 8.2 KEV Alta · 52 CWE-367 04/03/2025

VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

CVE-2025-22225 Alta · 8.2 KEV Alta · 60 Ransomware CWE-787 04/03/2025

VMware ESXi Arbitrary Write Vulnerability

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

CVE-2025-22226 Média · 6.0 KEV Alta · 50 CWE-125 04/03/2025

VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.

CVE-2024-38813 Crítica · 9.8 KEV Alta · 60 CWE-273 17/09/2024

VMware vCenter Server Privilege Escalation Vulnerability

The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

CVE-2024-38812 Crítica · 9.8 KEV Alta · 63 CWE-787 17/09/2024

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

CVE-2024-37085 Alta · 7.2 KEV Urgente · 82 Exploit público Ransomware CWE-287 25/06/2024

VMware ESXi Authentication Bypass Vulnerability

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.

CVE-2024-37079 Crítica · 9.8 KEV Alta · 63 CWE-787 18/06/2024

Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

CVE-2023-34048 Crítica · 9.8 KEV Urgente · 74 Exploit público CWE-787 25/10/2023

VMware vCenter Server Out-of-Bounds Write Vulnerability

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

CVE-2023-20867 Baixa · 3.9 KEV Alta · 59 CWE-287 13/06/2023

VMware Tools Authentication Bypass Vulnerability

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

CVE-2023-20887 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-77 07/06/2023

Vmware Aria Operations for Networks Command Injection Vulnerability

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

CVE-2023-29552 Alta · 7.5 KEV Alta · 59 25/04/2023

Service Location Protocol (SLP) Denial-of-Service Vulnerability

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

CVE-2022-22960 Alta · 7.8 KEV Alta · 68 Exploit público CWE-732 13/04/2022

VMware Multiple Products Privilege Escalation Vulnerability

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

CVE-2022-22954 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-94 11/04/2022

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.

CVE-2022-22965 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-94 01/04/2022

Spring Framework JDK 9+ Remote Code Execution Vulnerability

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.

CVE-2022-22963 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-917 01/04/2022

VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

CVE-2022-22948 Média · 6.5 KEV Alta · 68 Exploit público CWE-276 29/03/2022

VMware vCenter Server Incorrect Default File Permissions Vulnerability

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

CVE-2022-22947 Crítica · 10.0 KEV Urgente · 83 Exploit público CWE-917 03/03/2022

Vulnerabilidade de Injeção de Código no VMware Spring Cloud Gateway (CVE-2022-22947)

Nas versões do spring cloud gateway anteriores a 3.1.1+ e 3.0.7+, as aplicações são vulneráveis a um ataque de injeção de código quando o endpoint Gateway Actuator está habilitado, exposto e sem proteção. Um atacante remoto poderia enviar uma requisição maliciosamente elaborada que permitiria a execução remota arbitrária no host remoto.

CVE-2021-22054 Alta · 7.5 KEV Alta · 69 Exploit público CWE-918 17/12/2021

Omnissa Workspace ONE Server-Side Request Forgery

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.

CVE-2021-22017 Média · 5.3 KEV Alta · 60 Exploit público 23/09/2021

VMware vCenter Server Improper Access Control

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.

CVE-2021-22005 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-22 23/09/2021

VMware vCenter Server File Upload Vulnerability

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.

CVE-2021-21985 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-918 26/05/2021

VMware vCenter Server Improper Input Validation Vulnerability

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.

CVE-2021-21975 Alta · 7.5 KEV Urgente · 89 Exploit público Ransomware CWE-918 31/03/2021

VMware Server Side Request Forgery in vRealize Operations Manager API

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.