logo

VMware Vulnerabilities Exploited

Multiple reports document critical vCenter and ESXi flaws—including DCE/RPC heap overflows and ESXi VM‑escape zero‑days—being actively exploited (often to achieve remote code execution, VM escape, ransomware deployment, or persistent backdoors), prompting urgent patching and hardening.

List of posts related to this topic

Post TitleDate Published↓Threat ScoreFeed
CISA: Critical VMware RCE flaw now exploited by ransomware gangs2026-09-1585Bleeping Computer
Not Subscribed
CISA Warns Hackers Are Actively Exploiting VMware vCenter Path Traversal Flaw2026-08-1990GBHackers
Not Subscribed
Warning: Multiple critical vulnerabilities in the vCenter component of many VMware products, Patch Immediately! 2026-07-3178Centre for Cybersecurity Belgium Advisories Feed
Not Subscribed
VMware Security Advisory2026-07-3180Kudelski Security
Not Subscribed
VMware fixes three critical flaws allowing auth bypass, VM escapes2026-07-3075Bleeping Computer
Not Subscribed
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape2026-07-2980The Hacker News
Not Subscribed
Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution2026-07-2975Security Affairs
Not Subscribed
Critical VMware Flaws Allow Attackers to Bypass Authentication and Gain Access to the System2026-07-2980cybersecurityNews.com
Not Subscribed
Broadcom Patches CVE-2026-59309 & CVE-2026-59310 (CVSS 9.8) in VMware2026-07-2978securityonline.info
Not Subscribed
Patches are not enough for VMWare vCenter Server and Cloud Foundation vulns2026-03-0588Mitiga
Not Subscribed
CISA Warns of VMware ESXi 0-day Vulnerability Exploited in Ransomware Attacks2026-02-0590cybersecurityNews.com
Not Subscribed
CVE-2025-22225 in VMware ESXi now used in active ransomware attacks2026-02-0485Security Affairs
Not Subscribed
CISA Flags Actively Exploited VMware vCenter RCE Flaw in KEV Catalog2026-01-2790The Cyber Express
Not Subscribed
CISA says critical VMware RCE flaw now actively exploited2026-01-2690Bleeping Computer
Not Subscribed
CISA Alert: Critical VMware vCenter RCE (CVSS 9.8) Now Exploited in the Wild2026-01-2590securityonline.info
Not Subscribed
CISA Warns of Critical VMware vCenter RCE Vulnerability Now Exploited in Attacks2026-01-2490cybersecurityNews.com
Not Subscribed
U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog2026-01-2490Security Affairs
Not Subscribed
Patch or die: VMware vCenter Server bug fixed in 2024 under attack today2026-01-2390The Register (Security)
Not Subscribed
China-linked cybercrims abused VMware ESXi zero-days a year before disclosure2026-01-0990The Register (Security)
Not Subscribed
Chinese-speaking hackers exploited ESXi zero-days long before disclosure2026-01-0990Security Affairs
Not Subscribed
“VM Isolation is Not Absolute”: Researchers Unmask Sophisticated ESXi “Maestro” Exploit2026-01-0890securityonline.info
Not Subscribed
ESXi Exploitation in the Wild2026-01-0790Huntress Blog
Not Subscribed
Three VMware Zero-Days Exploited—Are You At Risk?2025-10-2185Cyble Blog
Not Subscribed
Zero-Days Put Tens of 1,000s of Orgs at Risk for VM Escape Attacks2025-03-0775Dark Reading
Not Subscribed
Over 37,000 VMware ESXi servers vulnerable to ongoing attacks2025-03-0690Bleeping Computer
Not Subscribed
Critical VMware ESXi, Workstation, Fusion Vulnerabilities Seen Exploited in Wild2025-03-0685Kudelski Security
Not Subscribed
Three Zero-Day Vulnerabilities Discovered in VMware Products2025-03-0592Cybereason Blog
Not Subscribed
Broadcom urges VMware customers to patch ‘emergency’ zero-day bugs under active exploitation2025-03-0590TechCrunch Security News
Not Subscribed
3 VMware Zero-Day Bugs Allow Sandbox Escape2025-03-0488Dark Reading
Not Subscribed
CISA, VMware warn of new vulnerabilities being exploited by hackers2025-03-0485The Record from Recorded Future News
Not Subscribed
VMware splats guest-to-hypervisor escape bugs already exploited in wild2025-03-0485The Register (Security)
Not Subscribed
Broadcom fixes three VMware zero-days exploited in attacks2025-03-0490Bleeping Computer
Not Subscribed
Critical 9.8-rated VMware vCenter RCE bug exploited after patch fumble2024-11-1885The Register (Security)
Not Subscribed
Critical RCE bug in VMware vCenter Server now exploited in attacks2024-11-1885Bleeping Computer
Not Subscribed
VMware fixes critical RCE, make-me-root bugs in vCenter - for the second time2024-10-2278The Register (Security)
Not Subscribed
VMware fixes bad patch for critical vCenter Server RCE flaw2024-10-2275Bleeping Computer
Not Subscribed
VMware Product Security Update Advisory (CVE-2024-38812, CVE-2024-38813)2024-09-1875ASEC
Not Subscribed
Critical VMware vCenter Server Patch2024-09-1875Kudelski Security
Not Subscribed
VMware patches remote make-me-root holes in vCenter Server, Cloud Foundation2024-09-1780The Register (Security)
Not Subscribed
VMware vCenter vulnerabilities: How to find impacted devices2024-09-1790runZero Blog
Not Subscribed
Broadcom fixes critical RCE bug in VMware vCenter Server2024-09-1775Bleeping Computer
Not Subscribed
June 18, 2024: Heap Overflow Vulnerabilities in VMWare vCenter Server2024-06-1875Censys Blog
Not Subscribed
Critical VMware Bugs Open Swaths of VMs to RCE, Data Theft2024-06-1870Dark Reading
Not Subscribed
VMware fixes critical vCenter RCE vulnerability, patch now2024-06-1875Bleeping Computer
Not Subscribed
VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi2024-06-1875The Hacker News
Not Subscribed
VMware by Broadcom warns of two critical vCenter flaws, plus a nasty sudo bug2024-06-1875The Register (Security)
Not Subscribed
Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern2024-05-2375The Hacker News
Not Subscribed
VMware urges emergency action to blunt hypervisor flaws2024-03-0780The Register (Security)
Not Subscribed
VMware confirms critical vCenter flaw now exploited in attacks2024-01-1985Bleeping Computer
Not Subscribed
ESXWhy: A Look at ESXiArgs Ransomware2023-02-0975Censys Blog
Not Subscribed

1–50 of 52

Built by the dogesec team. Copyright 2026.