Vmware Cloud Foundation vulnerabilities
135 published vulnerabilities in Vmware Cloud Foundation, 19 of them exploited in the wild. The most were published in 2021 (45), and 6 so far in 2026.
Vmware Cloud Foundation vulnerabilities by year
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Vmware Cloud Foundation vulnerabilities
- CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow
- CVE-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write
- CVE-2022-22954 VMware Workspace ONE Access and Identity Manager Server-Side Template Injection
- CVE-2021-22005 VMware vCenter Server File Upload
- CVE-2021-21985 VMware vCenter Server Improper Input Validation
- CVE-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API
- CVE-2021-21972 VMware vCenter Server Remote Code Execution
- CVE-2020-3992 VMware ESXi OpenSLP Use-After-Free
- CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition
- CVE-2020-4006 Multiple VMware Products Command Injection
- CVE-2025-22225 VMware ESXi Arbitrary Write
- CVE-2026-22719 Broadcom VMware Aria Operations Command Injection
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.