VMware security advisories, February 2026

Every VMware (Broadcom) security advisory published in February 2026, from VMware Security Advisories (VMSA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 8
Critical: 0
High: 2
In CISA KEV: 1
CVEs: 8

VMware advisories published in February 2026

Feb 27, 2026
Medium [CVE-2026-22716] Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform
Medium5.0
Feb 27, 2026
Low [CVE-2026-22717] Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform
Low2.7
Feb 26, 2026
Medium [CVE-2026-22722] malicious actor with authenticated user privileges on a Windows based Workstation host
Medium6.1
Feb 26, 2026
Medium [CVE-2026-22715] Workstation: VMWare Workstation and Fusion contain a logic flaw in the management of network packets.
Medium5.9
Feb 26, 2026
Medium [CVE-2026-22728] Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation (/v1/rotate) flow.
Medium4.9
Feb 25, 2026
High [CVE-2026-22720] Aria Operations: VMware Aria Operations contains a stored cross-site scripting vulnerability.
High8.0
Feb 25, 2026
High [CVE-2026-22719] Aria Operations: VMware Aria Operations contains a command injection vulnerability.
High8.1ExploitedCISA KEV
Feb 25, 2026
Medium [CVE-2026-22721] vCenter: VMware Aria Operations contains a privilege escalation vulnerability.
Medium6.2

Get an email when VMware publishes the next one.

See VMware's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about VMware

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.