Security News

VMware Patches Vulnerabilities in vCenter Server
2017-11-13 16:53

The VMware vCenter Server management software is affected by a couple of moderate severity vulnerabilities that can be exploited for obtaining information and remote denial-of-service (DoS)...

Legitimate VMware Binary Abused for Banking Trojan Distribution
2017-09-29 13:45

A recently discovered banking Trojan campaign has been abusing a legitimate VMware binary to trick security products into allowing malicious binaries to load, Cisco researchers reveal. read more

VMware Patches Critical SVGA Code Execution Flaw
2017-09-15 17:45

Patches released this week by VMware address several vulnerabilities, including one rated critical, in the company’s ESXi, vCenter Server, Workstation and Fusion products. read more

VMware Patches Bug That Allows Guest to Execute Code on Host
2017-09-15 15:51

Users who run four different types of VMware products, ESXi, vCenter Server, Fusion and Workstation, are being encouraged to update to address a series of vulnerabilities, one critical.

VMware Patches 'Hard-to-Exploit' DoS Vulnerability (Security Week)
2017-08-14 10:00

An update released by VMware for its NSX-V network virtualization solution patches an important denial-of-service (DoS) vulnerability. The security hole, tracked as CVE-2017-4920, exists in the...

VMware API Allows Limited vSphere Users to Access Guest OS (Security Week)
2017-07-28 14:30

LAS VEGAS - BLACK HAT USA - Researchers discovered that a VMware API can be abused by vSphere users with limited privileges to access the guest operating system without authentication. VMware has...

VMware Patches Flaws in Horizon, vSphere Products (Security Week)
2017-06-09 08:19

Updates released by VMware this week for its Horizon View Client and vSphere Data Protection (VDP) products address a total of three critical and important vulnerabilities. read more

VMware Patches Critical Vulnerabilities in vSphere Data Protection (Threatpost)
2017-06-08 16:12

VMware fixed two critical vulnerabilities in its vSphere Data Protection solution this week that could have allowed an attacker to execute commands on the appliance, among other outcomes.

VMware Patches Multiple Security Issues in Workstation (Threatpost)
2017-05-19 16:47

VMware fixed two bugs in its VMware Workstation late Thursday night, including an insecure library loading vulnerability and a NULL pointer dereference vulnerability.