V
Vendor security profile29 actively exploited CVEs
vmware
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs195
Critical24
CISA KEV29
Public exploit36
Patch rate%36
Avg. CVSS6.8
12-month vulnerability rate
0
0
0
0
1
9
4
51
2
78
0
5
CVE KEV
CVE severity distribution
195toplam CVE
Critical24 (12%)
High62 (32%)
Medium75 (38%)
Low14 (7%)
Uncertain20 (10%)
Patch and exploitation view
%36
Verified patch
%15
CISA KEV
%18
Public exploit
70Patch available
1Partial
24Workaround
0Vendor: no patch
100Unknown
Latest vulnerabilities
8.1
CVE-2026-59347
VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability
V
Patch status unknownEPSS %0
9.3
CVE-2026-59346
VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability
V
Patch status unknownEPSS %0
5.7
CVE-2026-106123
RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()
R
Patch verifiedEPSS %0
6.0
CVE-2026-106122
RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers
R
Patch verifiedEPSS %0
4.9
CVE-2026-106121
RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS
R
Patch verifiedEPSS %1
8.2
CVE-2026-59324
fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction
S
Patch status unknownEPSS %0
6.3
CVE-2026-59322
EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders
S
Patch status unknownEPSS %0
4.2
CVE-2026-59321
Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check
S
Patch status unknownEPSS %0
6.5
CVE-2026-59320
In Spring AMQP the link credit never replenished on listener exception path
S
Patch status unknownEPSS %0
4.3
CVE-2026-59319
RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure
S
Patch status unknownEPSS %0