Vendor
VMware vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 226 vulnerabilities in VMware: 0 in the last 7 days and 73 in the last 90 days, 42 of them critical and 30 exploited in the wild. The most recent, CVE-2026-67418, was published on 14 October 2026. 3 vulnerabilities in the last four weeks, down 90% on the four before (30). 0 critical against 1. 26 technologies have a page of their own.
- Last 7 days
- 0
- Last 90 days
- 73
- Critical, all time
- 42
- Exploited in the wild
- 30
About VMware
Provider of virtualization, cloud computing, and enterprise software solutions.
VMware technologies
- VMware RabbitMQ30
- VMware Spring Framework26
- VMware Cloud Foundation21
- VMware Spring AI20
- VMware Spring Security19
- VMware ESXi11
- VMware Spring Boot11
- VMware Fusion8
- VMware Avi Load Balancer7
- VMware Spring for GraphQL7
- VMware Spring Integration7
- VMware vSphere Foundation7
- VMware Spring Web Services7
- VMware Workstation7
- VMware Spring Cloud Function6
- VMware Spring Data REST6
- VMware Spring Cloud Config5
- VMware Reactor Netty4
- VMware Spring AMQP4
- VMware Spring Cloud Gateway4
- VMware Cloud Foundation Operations3
- VMware Identity Manager3
- VMware Spring Authorization Server3
- VMware Spring Cloud Stream3
- VMware Spring for Apache Kafka3
- VMware Workspace ONE Access3
Latest VMware vulnerabilities
- CVE-2026-67418: RabbitMQ MQTT 5 parser invalid property denial of serviceinfoEPSS 0.4%
- CVE-2026-67416: RabbitMQ AMQP 1.0 parser descriptor validation bypassinfoEPSS 0.5%
- CVE-2026-67414: RabbitMQ AMQP 1.0 parser memory exhaustioninfoEPSS 0.5%
- CVE-2026-59347: VMware Workstation and Fusion stack buffer overflow in HGFShighCVSS 8.1
- CVE-2026-59346: VMware Workstation and Fusion integer overflow in VMXNET3criticalCVSS 9.3
- CVE-2026-67421: RabbitMQ Management XSS via queue name in OAuth UIinfo
- CVE-2026-67413: RabbitMQ JMS topic exchange denial of service via regex wildcard expansioninfo
- CVE-2026-67412: RabbitMQ Federation upstream authorization bypassinfo
- CVE-2026-67408: RabbitMQ denial of service in Stream Management super-stream bindinginfo
- CVE-2026-67407: RabbitMQ MQTT topic permission bypass in regex escapinginfo
- CVE-2026-67242: RabbitMQ OAuth2 token expiry bypass for fractional expinfo
- CVE-2026-67226: RabbitMQ atom exhaustion in user tags managementinfo
- CVE-2026-67225: RabbitMQ stream protocol frame size validation bypassinfo
- CVE-2026-67222: RabbitMQ list_to_atom denial of service in auth_mechanisminfo
- CVE-2026-66078: RabbitMQ protected tag bypass in bulk-delete endpointinfo
- CVE-2026-66073: RabbitMQ atom table exhaustion in management APIinfo
- CVE-2026-66071: RabbitMQ atom exhaustion in OAuth2 JWT scope parsinginfo
- CVE-2026-67236: RabbitMQ insecure authentication cookie in management consoleinfo
- CVE-2026-67233: RabbitMQ authorization bypass in shovel management resourceinfoEPSS 0.3%
- CVE-2026-67405: RabbitMQ missing Origin header validation in WebSocket upgradeinfoEPSS 0.1%
- CVE-2026-67404: RabbitMQ OAuth2 JWKS signature verification bypassinfoEPSS 0.2%
- CVE-2026-67235: RabbitMQ unvalidated content-header BodySize memory exhaustioninfoEPSS 0.3%
- CVE-2026-67231: RabbitMQ trust-store plugin TLS client authentication bypassinfoEPSS 0.3%
- CVE-2026-67229: RabbitMQ denial of service in vhost metadata importinfoEPSS 0.3%
- CVE-2026-67228: RabbitMQ atom table exhaustion denial of service in runtime-parametersinfoEPSS 0.3%
Most severe VMware vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2024-37079: Broadcom VMware vCenter Server out-of-bounds write in DCERPC protocolcriticalexploited in the wildCVSS 9.8EPSS 82.0%
- CVE-2026-59310: VMware vCenter directory traversal in Syslog servercriticalexploited in the wildCVSS 9.8EPSS 2.6%
- CVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2023-34048: VMware vCenter Server Out-of-Bounds Write Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2023-20887: Vmware Aria Operations for Networks Command Injection Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2022-22954: VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2021-22005: VMware vCenter Server File Upload Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2019-5544: VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2021-21972: VMware vCenter Server Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.8
Vulnerabilities per week
3 vulnerabilities in the last four weeks, down 90% on the four before (30). 0 critical against 1. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 3 | 0 | |
| 24 Aug 2026 | 37 | 4 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 1 | 0 | |
| 21 Sep 2026 | 27 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 2 | 1 | |
| 12 Oct 2026 | 3 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many VMware vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/vmware)<a href="https://junglewise.ai/threats/vendors/vmware"><img src="https://junglewise.ai/threats/vendors/vmware/badge.svg" alt="VMware vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/vmware.json, and this page as text at https://junglewise.ai/threats/vendors/vmware.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "VMware vulnerabilities", https://junglewise.ai/threats/vendors/vmware, 9 November 2026.