Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Endpoints, servers and mobile

Endpoints, servers and mobile

Virtualization, VDI and cloud

Hypervisors, virtualization consoles, virtual desktops (VDI) and vendors’ cloud services.

For example: VMware ESXi, vCenter, Hyper-V, Citrix Virtual Apps.

Category RSS feed

Affected brands

In alphabetical order, with their number of vulnerabilities in this category.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

See also

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this category.

  1. Rank 1

    VMware (Broadcom) vCenter ServerCVE-2026-59310

    Broadcom VMware vCenter Path Traversal Vulnerability

    Hunt for compromise (CISA)Ransomware

    CVSS severity 9.8critical

    Added Aug 18, 2026

  2. Rank 2

    VMware (Broadcom) vCenter ServerCVE-2024-37079

    Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

    CVE from 2024, added in 2026

    CVSS severity 9.8critical

    Added Jan 23, 2026

  3. Rank 3

    VMware (Broadcom) VMware ToolsCVE-2025-41244

    Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

    CVSS severity 7.8high

    Added Oct 30, 2025

  4. Rank 4

    Microsoft Partner CenterCVE-2024-49035

    Microsoft Partner Center Improper Access Control Vulnerability

    CVSS severity 9.8critical

    Added Feb 25, 2025

  5. Rank 5

    Microsoft Power PagesCVE-2025-24989

    Microsoft Power Pages Improper Access Control Vulnerability

    CVSS severity 9.8critical

    Added Feb 21, 2025

  6. Rank 6

    VMware (Broadcom) vCenter ServerCVE-2024-38812

    VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Nov 20, 2024

  7. Rank 7

    VMware (Broadcom) vCenter ServerCVE-2024-38813

    VMware vCenter Server Privilege Escalation Vulnerability

    CVSS severity 9.8critical

    Added Nov 20, 2024

  8. Rank 8

    VMware (Broadcom) vCenter ServerCVE-2023-34048

    VMware vCenter Server Out-of-Bounds Write Vulnerability

    CVSS severity 9.8critical

    Added Jan 22, 2024

  9. Rank 9

    Citrix Workspace app / ReceiverCVE-2019-11634

    Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  10. Rank 10

    VMware (Broadcom) ESXiCVE-2019-5544

    VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

Show 25 more vulnerabilities
  1. Rank 11

    VMware (Broadcom) vCenter ServerCVE-2020-3952

    VMware vCenter Server Information Disclosure Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  2. Rank 12

    VMware (Broadcom) ESXiCVE-2020-3992

    VMware ESXi OpenSLP Use-After-Free Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  3. Rank 13

    Cisco HyperFlex HXCVE-2021-1497

    Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  4. Rank 14

    Cisco HyperFlex HXCVE-2021-1498

    Cisco HyperFlex HX Data Platform Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  5. Rank 15

    VMware (Broadcom) vCenter ServerCVE-2021-21972

    VMware vCenter Server Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  6. Rank 16

    VMware (Broadcom) vCenter ServerCVE-2021-21985

    VMware vCenter Server Improper Input Validation Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  7. Rank 17

    VMware (Broadcom) vCenter ServerCVE-2021-22005

    VMware vCenter Server File Upload Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  8. Rank 18

    Microsoft Open Management Infrastructure (OMI)CVE-2021-38647

    Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  9. Rank 19

    Microsoft Hyper-VCVE-2020-1040

    Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

    CVSS severity 9.0critical

    Added Nov 3, 2021

  10. Rank 20

    Oracle VirtualBoxCVE-2008-3431

    Oracle VirtualBox Insufficient Input Validation Vulnerability

    CVE from 2008, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  11. Rank 21

    VMware (Broadcom) ESXiCVE-2025-22224

    VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

    CVSS severity 8.2high

    Added Mar 4, 2025

  12. Rank 22

    VMware (Broadcom) ESXiCVE-2025-22225

    VMware ESXi Arbitrary Write Vulnerability

    Ransomware

    CVSS severity 8.2high

    Added Mar 4, 2025

  13. Rank 23

    Citrix Session RecordingCVE-2024-8068

    Citrix Session Recording Improper Privilege Management Vulnerability

    CVSS severity 8.0high

    Added Aug 25, 2025

  14. Rank 24

    Citrix Session RecordingCVE-2024-8069

    Citrix Session Recording Deserialization of Untrusted Data Vulnerability

    CVSS severity 8.0high

    Added Aug 25, 2025

  15. Rank 25

    VMware (Broadcom) Workstation / FusionCVE-2020-3950

    VMware Multiple Products Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  16. Rank 26

    Microsoft Open Management Infrastructure (OMI)CVE-2021-38645

    Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  17. Rank 27

    Microsoft Open Management Infrastructure (OMI)CVE-2021-38648

    Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  18. Rank 28

    Microsoft Open Management Infrastructure (OMI)CVE-2021-38649

    Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  19. Rank 29

    Citrix StoreFrontCVE-2019-13608

    Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  20. Rank 30

    VMware (Broadcom) ESXiCVE-2024-37085

    VMware ESXi Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Jul 30, 2024

  21. Rank 31

    VMware (Broadcom) vCenter ServerCVE-2022-22948

    VMware vCenter Server Incorrect Default File Permissions Vulnerability

    CVE from 2022, added in 2024

    CVSS severity 6.5medium

    Added Jul 17, 2024

  22. Rank 32

    VMware (Broadcom) ESXiCVE-2025-22226

    VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

    CVSS severity 6.0medium

    Added Mar 4, 2025

  23. Rank 33

    VMware (Broadcom) vCenter ServerCVE-2021-21973

    VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

    CVSS severity 5.3medium

    Added Mar 7, 2022

  24. Rank 34

    VMware (Broadcom) vCenter ServerCVE-2021-22017

    VMware vCenter Server Improper Access Control

    CVSS severity 5.3medium

    Added Jan 10, 2022

  25. Rank 35

    VMware (Broadcom) VMware ToolsCVE-2023-20867

    VMware Tools Authentication Bypass Vulnerability

    CVSS severity 3.9low

    Added Jun 23, 2023

Filed under another category

These 4 vulnerabilities also concern this type of product, but are counted in their main category. My radar finds them when you follow this category.

  1. Microsoft WindowsCVE-2025-21333

    Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Jan 14, 2025

  2. Microsoft WindowsCVE-2025-21334

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added Jan 14, 2025

  3. Microsoft WindowsCVE-2025-21335

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added Jan 14, 2025

  4. Microsoft WindowsCVE-2024-38080

    Microsoft Windows Hyper-V Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Jul 9, 2024

Follow and verify

Get new vulnerabilities in this category: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.