What’s Vulnerable › Products
VMware vCenter Server vulnerabilities
83 known vulnerabilities, 12 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your VMware vCenter Server version is affected
Exploited VMware vCenter Server vulnerabilities
- CVE-2026-59310 — Broadcom VMware vCenter Path Traversal Vulnerability
- CVE-2024-37079 — Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
- CVE-2024-38813 — VMware vCenter Server Privilege Escalation Vulnerability
- CVE-2024-38812 — VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
- CVE-2022-22948 — VMware vCenter Server Incorrect Default File Permissions Vulnerability
- CVE-2023-34048 — VMware vCenter Server Out-of-Bounds Write Vulnerability
- CVE-2021-21973 — VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
- CVE-2021-22017 — VMware vCenter Server Improper Access Control
- CVE-2021-22005 — VMware vCenter Server File Upload Vulnerability
- CVE-2021-21985 — VMware vCenter Server Improper Input Validation Vulnerability
- CVE-2021-21972 — VMware vCenter Server Remote Code Execution Vulnerability
- CVE-2020-3952 — VMware vCenter Server Information Disclosure Vulnerability
Latest VMware vCenter Server vulnerabilities
- CVE-2026-59310 — Broadcom VMware vCenter Path Traversal Vulnerability (CVSS 9.8) — exploited
- CVE-2026-59309 — vCenter authentication-bypass vulnerability (CVSS 9.8)
- CVE-2025-41228 — VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability (CVSS 4.3)
- CVE-2025-41225 — VMware vCenter Server authenticated command-execution vulnerability (CVSS 8.8)
- CVE-2024-38813 — VMware vCenter Server Privilege Escalation Vulnerability (CVSS 9.8) — exploited
- CVE-2024-38812 — VMware vCenter Server Heap-Based Buffer Overflow Vulnerability (CVSS 9.8) — exploited
- CVE-2024-37087 — (CVSS 5.3)
- CVE-2024-37081 — (CVSS 7.8)
- CVE-2024-37080 — (CVSS 9.8)
- CVE-2024-37079 — Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability (CVSS 9.8) — exploited
- CVE-2024-22275 — (CVSS 4.9)
- CVE-2024-22274 — (CVSS 7.2)
- CVE-2023-34056 — VMware vCenter Server Partial Information Disclosure Vulnerability (CVSS 4.3)
- CVE-2023-34048 — VMware vCenter Server Out-of-Bounds Write Vulnerability (CVSS 9.8) — exploited
- CVE-2023-20896 — (CVSS 7.5)
- CVE-2023-20895 — (CVSS 9.8)
- CVE-2023-20894 — (CVSS 9.8)
- CVE-2023-20893 — (CVSS 9.8)
- CVE-2023-20892 — VMware vCenter Server heap-overflow vulnerability (CVSS 9.8)
- CVE-2022-31698 — (CVSS 5.3)
- CVE-2022-31697 — (CVSS 5.5)
- CVE-2022-31680 — (CVSS 9.1)
- CVE-2022-22982 — (CVSS 7.5)
- CVE-2022-22948 — VMware vCenter Server Incorrect Default File Permissions Vulnerability (CVSS 6.5) — exploited
- CVE-2021-22049 — (CVSS 9.8)