VMware vCenter Server

8 known vulnerabilities in VMware vCenter Server, 6 critical, 8 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2024-38813 CVSS 9.8 critical · actively exploited VMware vCenter Server Privilege Escalation Vulnerability
  • CVE-2024-38812 CVSS 9.8 critical · actively exploited VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
  • CVE-2024-37079 CVSS 9.8 critical · actively exploited Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
  • CVE-2023-34048 CVSS 9.8 critical · actively exploited VMware vCenter Server Out-of-Bounds Write Vulnerability
  • CVE-2022-22948 CVSS 6.5 medium · actively exploited VMware vCenter Server Incorrect Default File Permissions Vulnerability
  • CVE-2021-21973 CVSS 5.3 medium · actively exploited VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
  • CVE-2021-21972 CVSS 9.8 critical · actively exploited VMware vCenter Server Remote Code Execution Vulnerability
  • CVE-2020-3952 CVSS 9.8 critical · actively exploited VMware vCenter Server Information Disclosure Vulnerability

Latest vulnerabilities

  • CVE-2024-38813 CVSS 9.8 critical · actively exploited VMware vCenter Server Privilege Escalation Vulnerability
  • CVE-2024-38812 CVSS 9.8 critical · actively exploited VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
  • CVE-2024-37079 CVSS 9.8 critical · actively exploited Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
  • CVE-2023-34048 CVSS 9.8 critical · actively exploited VMware vCenter Server Out-of-Bounds Write Vulnerability
  • CVE-2022-22948 CVSS 6.5 medium · actively exploited VMware vCenter Server Incorrect Default File Permissions Vulnerability
  • CVE-2021-21973 CVSS 5.3 medium · actively exploited VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
  • CVE-2021-21972 CVSS 9.8 critical · actively exploited VMware vCenter Server Remote Code Execution Vulnerability
  • CVE-2020-3952 CVSS 9.8 critical · actively exploited VMware vCenter Server Information Disclosure Vulnerability