VMware (Broadcom) Security Advisories & CVEs

81 advisories tracked · VMware Security Advisories (VMSA) via NVD · direct feeds checked every minute; rate-limited backstops use a safe source cadence

Android app · Google Play

Monitor VMware CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Get CVE alerts See app features

Check if your VMware device is affected

Pick your product and enter the exact software release it runs. We match it against the affected/fixed versions in VMware's recent advisories.

Official source

VMware Security Advisories (VMSA) via NVD

Broadcom's VMSA portal is a JavaScript app with no stable public feed, so VulniPulse ingests VMware CVEs from NVD filtered to VMware's own CNAs (security@vmware.com and Broadcom's successor CNA) — official, CNA-published data covering ESXi, vCenter Server, NSX, Aria/vRealize, Cloud Foundation, Workstation/Fusion and VMware Tools. Each entry links back to the Broadcom/VMware advisory when NVD carries the reference.

Visit VMware (Broadcom) security advisories VMware RSS feed VMware end-of-life dates(3 product families)

Latest VMware advisories

All severities critical high medium low

All platforms ESXi / vSphere vCenter Server NSX Cloud Foundation Aria / vRealize Workstation & Fusion VMware Tools Avi / VeloCloud Tanzu / Spring

High8.2VMware Exploited CISA KEV

High [CVE-2025-22225] VMware ESXi contains an arbitrary write vulnerability

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox. Affected products named by the advisory: VMware Cloud Foundation; VMware Telco Cloud Platform; VMware Telco Cloud Infrastructure.