Cloud Foundation EUVD-2025-16909

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. Rated critical sev

OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

VMware ESXi and Workstation contain a TOCTOU race condition leading to out-of-bounds write, allowing local administrator

Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authent

Remote code execution in VMware vCenter Server (and bundled distributions including Cloud Foundation, vSphere Foundation

VMware ESXi contains an arbitrary write vulnerability that allows privileged VMX process users to trigger kernel writes,

VMware Aria Operations contains a command injection vulnerability (CVE-2026-22719, CVSS 8.1) that allows unauthenticated

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability via HGFS out-of-bounds read, allowi

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. Rated critical severity (CV