One of the most severe issues, tracked as CVE-2025-41250, is an SMTP header injection bug in vCenter. With a CVSSv3 base ...

VMware released the latest version of its cloud platform, while announcing end of support for various management packs affiliated with hyperscalers and other third-party vendors.

VMware has released another security update for CVE-2024-38812, a critical VMware vCenter Server remote code execution vulnerability that was not correctly fixed in the first patch from September 2024 ...

Two VMware vCenter server bugs, including a critical heap-overflow vulnerability that leads to remote code execution (RCE), have been exploited in attacks after Broadcom’s first attempt to fix the ...

The U.S. Cybersecurity and Infrastructure Security Agency has raised urgent security alerts about three VMware vulnerabilities, including CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226, that ...

VMware is urging customers to patch critical vulnerabilities that make it possible for hackers to break out of sandbox and hypervisor protections in all versions, including out-of-support ones, of ...