Security News

Update VMware Tools for Windows Now: High-Severity Flaw Lets Hackers Bypass Authentication
2025-03-26 18:26

CVE-2025-22230 is described as an "authentication bypass vulnerability" by Broadcom, allowing hackers to perform high-privilege operations without the necessary credentials.

New Security Flaws Found in VMware Tools and CrushFTP — High Risk, No Workaround
2025-03-26 04:20

Broadcom has issued security patches to address a high-severity security flaw in VMware Tools for Windows that could lead to an authentication bypass. Tracked as CVE-2025-22230, the vulnerability...

Broadcom warns of authentication bypass in VMware Windows Tools
2025-03-25 19:17

Broadcom released security updates today to fix a high-severity authentication bypass vulnerability in VMware Tools for Windows. [...]

Over 37,000 VMware ESXi servers vulnerable to ongoing attacks
2025-03-06 15:39

Over 37,000 internet-exposed VMware ESXi instances are vulnerable to CVE-2025-22224, a critical out-of-bounds write flaw that is actively exploited in the wild. [...]

VMware splats guest-to-hypervisor escape bugs already exploited in wild
2025-03-04 19:31

The heap overflow zero-day in the memory unsafe code by Miss Creant Broadcom today pushed out patches for three VMware hypervisor-hijacking bugs, including one rated critical, that have already...

VMware Security Flaws Exploited in the Wild—Broadcom Releases Urgent Patches
2025-03-04 14:13

Broadcom has released security updates to address three actively exploited security flaws in VMware ESXi, Workstation, and Fusion products that could lead to code execution and information...

Broadcom fixes three VMware zero-days exploited in attacks
2025-03-04 13:23

Broadcom warned customers today about three VMware zero-days, tagged as exploited in attacks and reported by the Microsoft Threat Intelligence Center. [...]

Broadcom Patches VMware Aria Flaws – Exploits May Lead to Credential Theft
2025-01-31 05:49

Broadcom has released security updates to patch five security flaws impacting VMware Aria Operations and Aria Operations for Logs, warning customers that attackers could exploit them to gain...

VMware plugs steal-my-credentials holes in Cloud Foundation
2025-01-30 22:00

Consider patching soon because cybercrooks love to hit vulnerable tools from Broadcom's virtualization giant Broadcom has fixed five flaws, collectively deemed "high severity," in VMware's IT...

Broadcom Warns of High-Severity SQL Injection Flaw in VMware Avi Load Balancer
2025-01-29 05:29

Broadcom has alerted of a high-severity security flaw in VMware Avi Load Balancer that could be weaponized by malicious actors to gain entrenched database access. The vulnerability, tracked as...