Software Watch

VMware の脆弱性情報

配布元の告知ページ 2023-10-17 以降を収録

告知公開日重大度CVE
VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) VCDSA38288 固定リンク2026-09-03CRITICALCVE-2026-59346, CVE-2026-59347
VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) VCDSA38017 固定リンク2026-07-29CRITICALCVE-2026-59309, CVE-2026-59310, CVE-2026-47876 ほか 2 件
VMSA-2026-0005.1: VMware Avi Load Balancer addresses multiple vulnerabilities (CVE-2026-47865, CVE-2026-47866, CVE-2026-47867, CVE-2026-47868, CVE-2026-47869, CVE-2026-47870, CVE-2026-47871) VADSA37926 固定リンク2026-07-14CRITICALCVE-2026-47865, CVE-2026-47866, CVE-2026-47867 ほか 4 件
VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) VCDSA37513 固定リンク2026-06-08HIGHCVE-2026-41722, CVE-2026-41723, CVE-2026-41724
VMSA-2026-0003: VMware Fusion updates address privilege escalation vulnerability (CVE-2026-41702) VCDSA37454 固定リンク2026-05-14HIGHCVE-2026-41702
Tanzu Security Advisory CVE-2026-341431 VADSA37431 固定リンク2026-05-01HIGHCVE-2026-31431
VMSA-2026-0002: VMware Workstation and Fusion updates address multiple vulnerabilities (CVE-2026-22715, CVE-2026-22716, CVE-2026-22717, CVE-2026-22722) VCDSA36986 固定リンク2026-02-26MEDIUMCVE-2026-22715, CVE-2026-22716, CVE-2026-22717 ほか 1 件
VMSA-2026-0001: VMware Aria Operations updates address multiple vulnerabilities (CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721) VCDSA36947 固定リンク2026-02-24HIGHCVE-2026-22719, CVE-2026-22720, CVE-2026-22721
VMSA-2025-0016: VMware vCenter and NSX updates address multiple vulnerabilities (CVE-2025-41250, CVE-2025-41251, CVE-2025-41252) VCDSA36150 固定リンク2025-09-29HIGHCVE-2025-41250, CVE-2025-41251, CVE-2025-41252
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) VCDSA36149 固定リンク2025-09-29HIGHCVE-2025-41244, CVE-2025-41245, CVE-2025-41246
VMSA-2025-0014: VMware vCenter updates address a denial-of-service vulnerability (CVE-2025-41241) VCDSA35964 固定リンク2025-07-29MEDIUMCVE-2025-41241
VMSA-2025-0013: VMware ESXi, Workstation, Fusion, and Tools updates address multiple vulnerabilities (CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239) VCDSA35877 固定リンク2025-07-15CRITICALCVE-2025-41236, CVE-2025-41237, CVE-2025-41238 ほか 1 件
VMSA-2025-0012: VMware NSX updates address multiple vulnerabilities (CVE-2025-22243, CVE-2025-22244, CVE-2025-22245) VCDSA25738 固定リンク2025-06-04HIGHCVE-2025-22243, CVE-2025-22244, CVE-2025-22245
VMSA-2025-0011: VMware Avi Load Balancer addresses an authenticated blind SQL Injection vulnerability (CVE-2025-41233) VADCA25707 固定リンク2025-05-22MEDIUM—
VMSA-2025-0009 : VMware Cloud Foundation updates address multiple vulnerabilities (CVE-2025-41229, CVE-2025-41230, CVE-2025-41231) VCDSA25733 固定リンク2025-05-20HIGHCVE-2025-41229, CVE-2025-41230, CVE-2025-41231
VMSA-2025-0010 : VMware ESXi, vCenter Server, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2025-41225, CVE-2025-41226, CVE-2025-41227, CVE-2025-41228) VCDSA25717 固定リンク2025-05-20HIGHCVE-2025-41225, CVE-2025-41226, CVE-2025-41227 ほか 1 件
VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) VCDSA25711 固定リンク2025-05-12HIGHCVE-2025-22249
VMSA-2025-0007: VMware Tools update addresses an insecure file handling vulnerability (CVE-2025-22247) VCDSA25683 固定リンク2025-05-12MEDIUMCVE-2025-22247
VMSA-2025-0006: VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231) VCDSA25541 固定リンク2025-04-01HIGHCVE-2025-22231
VMSA-2025-0005: VMware Tools for Windows update addresses an authentication bypass vulnerability (CVE-2025-22230) VCDSA25518 固定リンク2025-03-25HIGHCVE-2025-22230
VMSA-2025-0004: VMware ESXi, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226) VCDSA25390 固定リンク2025-03-04CRITICALCVE-2025-22224, CVE-2025-22225, CVE-2025-22226
VMSA-2025-0003: VMware Aria Operations for Logs and VMware Aria Operations updates address multiple vulnerabilities (CVE-2025-22218, CVE-2025-22219, CVE-2025-22220, CVE-2025-22221 and CVE-2025-22222) VCDSA25329 固定リンク2025-01-30HIGHCVE-2025-22218, CVE-2025-22219, CVE-2025-22220 ほか 2 件
VMSA-2025-0002: VMware Avi Load Balancer addresses an unauthenticated blind SQL Injection vulnerability (CVE-2025-22217) VADSA25346 固定リンク2025-01-28HIGHCVE-2025-22217
VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215) VCDSA25312 固定リンク2025-01-07MEDIUMCVE-2025-22215
VMSA-2024-0022: VMware Aria Operations updates address multiple vulnerabilities(CVE-2024-38830, CVE-2024-38831, CVE-2024-38832, CVE-2024-38833, CVE-2024-38834) VCDSA25199 固定リンク2024-11-26HIGH—
VMSA-2024-0021: VMware HCX addresses an authenticated SQL injection vulnerability (CVE-2024-38814) VCDSA25019 固定リンク2024-10-16HIGHCVE-2024-38814
VMSA-2024-0020:VMware NSX updates address multiple vulnerabilities (CVE-2024-38818, CVE-2024-38817, CVE-2024-38815) VCDSA25047 固定リンク2024-10-09MEDIUMCVE-2024-38818, CVE-2024-38817, CVE-2024-38815
VMSA-2024-0019:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-38812, CVE-2024-38813) VCDSA24968 固定リンク2024-09-17CRITICALCVE-2024-38812, CVE-2024-38813
VMSA-2024-0018:VMware Fusion update addresses a code execution vulnerability (CVE-2024-38811) VCDSA24939 固定リンク2024-09-03HIGHCVE-2024-38811
VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280) VCDSA24598 固定リンク2024-07-10HIGHCVE-2024-22280
VMSA-2024-0016: VMware Cloud Director Availability addresses an HTML injection vulnerability (CVE-2024-22277) VCDSA24557 固定リンク2024-07-04MEDIUMCVE-2024-22277
VMSA-2024-0015: VMware Cloud Director Object Storage Extension addresses an Insertion of Sensitive Information vulnerability (CVE-2024-22276) VCDSA24372 固定リンク2024-06-27MEDIUMCVE-2024-22276
VMSA-2024-0014:VMware Cloud Director addresses an improper privilege management vulnerability (CVE-2024-22272) VCDSA24371 固定リンク2024-06-27MEDIUMCVE-2024-22272
VMSA-2024-0013:VMware ESXi and vCenter Server updates address multiple security vulnerabilities (CVE-2024-37085, CVE-2024-37086, CVE-2024-37087) VCDSA24505 固定リンク2024-06-25MEDIUMCVE-2024-37085, CVE-2024-37086, CVE-2024-37087
VMSA-2024-0012:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-37079, CVE-2024-37080, CVE-2024-37081) VCDSA24453 固定リンク2024-06-18CRITICALCVE-2024-37079, CVE-2024-37080, CVE-2024-37081
VMSA-2024-0011:VMware ESXi, Workstation, Fusion and vCenter Server updates address multiple security vulnerabilities (CVE-2024-22273, CVE-2024-22274, CVE-2024-22275) VCDSA24308 固定リンク2024-05-21HIGHCVE-2024-22273, CVE-2024-22274, CVE-2024-22275
VMSA-2024-0010: VMware Workstation and Fusion updates address multiple security vulnerabilities (CVE-2024-22267, CVE-2024-22268, CVE-2024-22269, CVE-2024-22270) VCDSA24280 固定リンク2024-05-14CRITICALCVE-2024-22267, CVE-2024-22268, CVE-2024-22269 ほか 1 件
VMSA-2024-0007:VMware Cloud Director updates address a partial information disclosure vulnerability (CVE-2024-22256) VCDSA24267 固定リンク2024-05-08MEDIUMCVE-2024-22256
VMSA-2024-0006:VMware ESXi, Workstation, and Fusion updates address multiple security vulnerabilities (CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255) VCDSA24266 固定リンク2024-05-08CRITICALCVE-2024-22252, CVE-2024-22253, CVE-2024-22254 ほか 1 件
VMSA-2024-0005:VMware Workstation and Fusion updates address an out-of-bounds read vulnerability (CVE-2024-22251) VCDSA24265 固定リンク2024-05-08MEDIUMCVE-2024-22251
VMSA-2024-0004:VMware Aria Operations updates address local privilege escalation vulnerability (CVE-2024-22235) VCDSA24264 固定リンク2024-05-08MEDIUMCVE-2024-22235
VMSA-2024-0009:VMware Avi Load Balancer updates address multiple vulnerabilities (CVE-2024-22264, CVE-2024-22266) VADSA24219 固定リンク2024-05-08HIGHCVE-2024-22264, CVE-2024-22266
VMSA-2024-0003:Addressing Arbitrary Authentication Relay and Session Hijack Vulnerabilities in Deprecated VMware Enhanced Authentication Plug-in (EAP) (CVE-2024-22245, CVE-2024-22250) VCDSA24257 固定リンク2024-05-07CRITICALCVE-2024-22245, CVE-2024-22250
VMSA-2024-0002:VMware Aria Operations for Networks (Formerly vRealize Network Insight) updates address multiple vulnerabilities VCDSA23681 固定リンク2024-02-04HIGHCVE-2024-22237, CVE-2024-22238, CVE-2024-22239 ほか 2 件
VMSA-2024-0001:VMware Aria Automation (formerly vRealize Automation) updates address a Missing Access Control vulnerability VCDSA23680 固定リンク2024-01-14CRITICALCVE-2023-34063
VMSA-2023-0026:VMware Cloud Director Appliance contains an authentication bypass vulnerability VCDSA23679 固定リンク2023-11-13CRITICALCVE-2023-34060
VMSA-2023-0024:VMware Tools updates address Local Privilege Escalation and SAML Token Signature Bypass vulnerabilities VCDSA23678 固定リンク2023-10-24HIGHCVE-2023-34057, CVE-2023-34058
VMSA-2023-0023:VMware vCenter Server updates address out-of-bounds write and information disclosure vulnerabilities VCDSA23677 固定リンク2023-10-23CRITICALCVE-2023-34048, CVE-2023-34056
VMSA-2023-0022:VMware Fusion and Workstation updates address privilege escalation and information disclosure vulnerabilities VCDSA23676 固定リンク2023-10-18HIGHCVE-2023-34044, CVE-2023-34045, CVE-2023-34046
VMSA-2023-0021:VMware Aria Operations for Logs updates address multiple vulnerabilities. VCDSA23666 固定リンク2023-10-17HIGHCVE-2023-34051, CVE-2023-34052

50 件。配布元が出した告知をそのまま並べたもので、製品の版とはまだ結び付けていません。

こちらで見つけた日

このサイトが更新に気づいた日です。実際に公開された日は、これより前のことがあります。

まだ来ていない日付

配布元が将来の日付で公開しています。予定として書かれていることも、時差の都合でそう見えることもあります。