VMware
917 CVEs across 155 months on the top 200 list since Mar 2000. Peak rank #8 in Apr 2010. 30 of them are now in CISA KEV.
VMware CVEs per month since Mar 2000
Sep 2021: 20 CVEs · 1 critical · 2 now in CISA KEV · rank #33 · mostly Vcenter Server, Cloud Foundation, FusionOct 2021: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #60 · mostly Cloud Foundation, Installbuilder, Vrealize Suite Lifecycle ManagerNov 2021: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #83 · mostly Vcenter Server, Cloud Foundation, Spring Cloud GatewayDec 2021: 3 CVEs · 0 critical · 1 now in CISA KEV · rank #195 · mostly Workspace One Access, Vrealize Automation, Identity ManagerJan 2022: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #194 · mostly Workstation, Fusion, Cloud FoundationFeb 2022: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #89 · mostly Cloud Foundation, ESXi, FusionMar 2022: 8 CVEs · 3 critical · 2 now in CISA KEV · rank #76 · mostly Spring Cloud Gateway, Carbon Black App Control, Spring BootApr 2022: 16 CVEs · 5 critical · 4 now in CISA KEV · rank #46 · mostly Vrealize Automation, Workspace One Access, Identity ManagerMay 2022: 8 CVEs · 2 critical · 0 now in CISA KEV · rank #86 · mostly Cloud Foundation, Vrealize Suite Lifecycle Manager, Workspace One AccessJun 2022: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #120 · mostly ESXi, Spring Cloud Function, Spring Data MongodbJul 2022: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #123 · mostly ESXi, Vrealize Log Insight, Cloud FoundationAug 2022: 18 CVEs · 2 critical · 0 now in CISA KEV · rank #42 · mostly Identity Manager, Identity Manager Connector, One AccessSep 2022: not on the top 200 that monthOct 2022: 7 CVEs · 3 critical · 0 now in CISA KEV · rank #93 · mostly Cloud Foundation, Spring Security, ESXiNov 2022: 11 CVEs · 8 critical · 0 now in CISA KEV · rank #77 · mostly Workspace One Assist, Hyperic Server, Hyperic AgentDec 2022: 11 CVEs · 1 critical · 0 now in CISA KEV · rank #61 · mostly Cloud Foundation, ESXi, Vrealize OperationsJan 2023: 5 CVEs · 2 critical · 0 now in CISA KEV · rank #117 · mostly Vrealize Log Insight, Spring BootFeb 2023: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #98 · mostly Ixgben, Vrealize Operations, Carbon Black App ControlMar 2023: not on the top 200 that monthApr 2023: 11 CVEs · 2 critical · 1 now in CISA KEV · rank #66 · mostly Fusion, Workstation, Cloud FoundationMay 2023: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #107 · mostly Cloud Foundation, Vrealize Operations, Greenplum DatabaseJun 2023: 10 CVEs · 1 critical · 2 now in CISA KEV · rank #73 · mostly VMware Cloud Foundation (Vcenter Server), VMware Vcenter Server (Vcenter Server), Vcenter ServerJul 2023: 5 CVEs · 1 critical · 0 now in CISA KEV · rank #152 · mostly Spring Security, SD-WAN Edge Firmware, Isolation SegmentAug 2023: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #140 · mostly Aria Operations For Networks, Horizon Client, Open Vm ToolsSep 2023: not on the top 200 that monthOct 2023: 14 CVEs · 2 critical · 1 now in CISA KEV · rank #54 · mostly Fusion, Tools, Aria Operations For LogsNov 2023: not on the top 200 that monthDec 2023: not on the top 200 that monthJan 2024: not on the top 200 that monthFeb 2024: 11 CVEs · 1 critical · 0 now in CISA KEV · rank #68 · mostly Aria Operations For Networks, Spring Security, VMware Enhanced Authentication Plug-in (Eap)Mar 2024: 6 CVEs · 2 critical · 0 now in CISA KEV · rank #143 · mostly ESXi, Cloud Foundation, FusionApr 2024: not on the top 200 that monthMay 2024: 9 CVEs · 1 critical · 0 now in CISA KEV · rank #140 · mostly Workstation, Fusion, Cloud FoundationJun 2024: 8 CVEs · 2 critical · 2 now in CISA KEV · rank #91 · mostly Cloud Foundation, Vcenter Server, ESXiJul 2024: not on the top 200 that monthAug 2024: not on the top 200 that monthSep 2024: not on the top 200 that monthOct 2024: not on the top 200 that monthNov 2024: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #188 · mostly Aria Operations, Cloud Foundation, VMware Aria OperationsDec 2024: not on the top 200 that monthJan 2025: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #145 · mostly Cloud Foundation, VMware Aria Operations For Logs, Aria Operations For LogsFeb 2025: not on the top 200 that monthMar 2025: not on the top 200 that monthApr 2025: not on the top 200 that monthMay 2025: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #89 · mostly Cloud Foundation, Telco Cloud Platform, Telco Cloud InfrastructureJun 2025: 16 CVEs · 1 critical · 0 now in CISA KEV · rank #57 · mostly Salt, VMware Nsx, Cloud FoundationJul 2025: 7 CVEs · 4 critical · 0 now in CISA KEV · rank #141 · mostly Cloud Foundation, Telco Cloud Infrastructure, Telco Cloud PlatformAug 2025: not on the top 200 that monthSep 2025: 8 CVEs · 0 critical · 1 now in CISA KEV · rank #102 · mostly Telco Cloud Platform, VMware Aria Operations, VMware Cloud FoundationOct 2025: not on the top 200 that monthNov 2025: not on the top 200 that monthDec 2025: not on the top 200 that monthJan 2026: not on the top 200 that monthFeb 2026: 9 CVEs · 0 critical · 1 now in CISA KEV · rank #118 · mostly Workstation, Aria Operations, Telco Cloud InfrastructureMar 2026: 11 CVEs · 2 critical · 0 now in CISA KEV · rank #112 · mostly Spring AI, Spring Boot, Spring FrameworkApr 2026: 26 CVEs · 1 critical · 1 now in CISA KEV · rank #35 · mostly Spring Boot, Spring Security, Spring AIMay 2026: 9 CVEs · 1 critical · 0 now in CISA KEV · rank #157 · mostly Spring AI, Spring Cloud Config, FusionJun 2026: 44 CVEs · 0 critical · 0 now in CISA KEV · rank #20 · mostly Spring Framework, Spring Security, Spring Data RestJul 2026: 13 CVEs · 4 critical · 0 now in CISA KEV · rank #110 · mostly Avi Load Balancer, Telco Cloud Platform, Cloud FoundationAug 2026: 64 CVEs · 7 critical · 0 now in CISA KEV · rank #16 · mostly Spring Integration, Spring Framework, Spring Security
In the lens
The products that kept showing up in VMware's monthly top three from Sep 2021 to Aug 2026. Move the lens and the list follows.
Year by year
Each year's months on the top 200 list. Pick a year to read it in the lens.
The record
- Peak rank
- #8 in Apr 2010
- Busiest month
- Aug 2026, 64 CVEs
- Months with a KEV entry
- 21 of 155 on the list
- On the top 200 list
- 155 of 318 monthly snapshots