Vulnerabilities
The authentication bypass vulnerability, tagged as CVE-2025-22230, carries a CVSS severity score of 7.8/10.
Hi, what are you looking for?
SecurityWeek
All posts tagged "VMware"
Vulnerabilities
Scans show that tens of thousands of VMware ESXi instances are affected by CVE-2025-22224 and other vulnerabilities disclosed recently as zero-days.
Vulnerabilities
Broadcom patched VMware zero-days CVE-2025-22224, CVE-2025-22225 and CVE-2025-22226 after Microsoft warned it of exploitation.
Malware & Threats
VMware calls attention to patches for multiple 'high-risk' security defects in its Aria Operations and Aria Operations for Logs products.
Malware & Threats
VMware warns that a malicious user with network access may be able to use specially crafted SQL queries to gain database access.
Malware & Threats
The company warns that malicious hackers can craft exploits to elevate privileges or launch cross-site scripting attacks.
Malware & Threats
The saga of VMWare’s critical CVE-2024-38812 vCenter Server bug has reached the “exploitation detected” stage.
Vulnerabilities
For the second time in as many months, VMware patches a remote code execution vulnerability first exploited at a Chinese hacking contest in June.
Vulnerabilities
VMware patches CVE-2024-38814 and warns that attackers with non-administrator privileges can execute remote code on the HCX manager.
Vulnerabilities
VMware warned that an attacker with network access could send a specially crafted packet to execute remote code. CVSS severity score 9.8/10.
Vulnerabilities
VMware rolls out patch for a high-severity code execution vulnerability in the Fusion hypervisor.
Vulnerabilities
Shadowserver has observed over 20,000 internet-accessible VMware ESXi instances impacted by an exploited vulnerability.
Ransomware
VMware did not mention in-the-wild exploitation for CVE-2024-37085 but Microsoft says ransomware gangs are abusing the just-patched flaw.
Data Protection
VMware warns that authenticated malicious users could enter specially crafted SQL queries and perform unauthorized read/write operations in the database.
Vulnerabilities
Serious vulnerabilities that can allow remote code execution and privilege escalation have been patched in VMware vCenter Server.
Incident Response
MITRE has shared information on how China-linked hackers abused VMware for persistence and detection evasion in the recent hack.
Vulnerabilities
VMware has patched three vulnerabilities exploited earlier this year at the Pwn2Own hacking competition.
Malware & Threats
The most serious flaws allow hackers with local admin rights to execute code as the virtual machine's VMX process running on the host.
Nation-State
CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, had been exploited as zero-day for a year and a half.
Vulnerabilities
VMware warns customers that CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, is being exploited in the wild.
Cybercrime
The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.
Malware & Threats
Vulnerabilities
Funding/M&A
Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.
Data Breaches
Cloud Security
