vmware security
-
VMware
VMware Tools Vulnerability VMSA-2025-0005: What You Need to Know
In case you didn’t know, VMware released a new VMware security advisory noted in the VMSA-2025-0005 bulletin and notes the flaw: CVE-2025-22230. This allows a user with limited privileges on a guest VM to perform privileged operations which means it…
-
VMware
Critical VMware vCenter Server Patch VMSA-2024-0019 – Upgrade Now!
In case you haven’t seen as of yet today, VMware has released a critical patch for VMware vCenter Server, noted in VMSA-2024-0019 for vulnerabilities: CVE-2024-38812, CVE-2024-38813. Let’s look at the vulnerabilities, the severity, any workarounds, and the process to get…
-
VMware
VMware vCenter Server VMSA-2024-0012 Critical Patch Update Steps
In case you haven’t heard as of yet, there is a new critical VMware vCenter Server critical patch advisory to be aware of that will require patching your vCenter Server. I have gone through the steps to patch vCenter Server…
-
Security
VMware affected by Retbleed Spectre variant – VMSA-2022-0020
Well, if you thought that Spectre and Meltdown (security nightmare blasts from the past) were dead, think again. There is a new data-leaking Retbleed Spectre variant that is yet another Spectre-based speculative-execution attack that allows attackers to expose secrets within…
-
Security
New VMware VMSA-2022-0004 security vulnerability Affects ESXi Workstation Pro and others
New VMware VMSA-2022-0004 security vulnerability Affects ESXi Workstation Pro and others. Yesterday, VMware released news of high-severity security vulnerabilities that affect core products across the board. The products affected include: VMware ESXiVMware Workstation Pro / Player (Workstation)VMware Fusion Pro /…
-
Security
Patch vCenter Server Critical Security Bug CVE-2021-22005 Download
Security concerns related to our VMware vSphere environments keep us up at night, and with good reason. Critical security bugs that affect your hypervisor virtualization environment can give an attacker the “keys to the kingdom.” It could potentially allow them…
-
Security
VMware vCenter Server VCSA Remote Code Execution Exploited in the wild – VMSA-2021-0010 CVE-2021-21985
As a reminder to everyone and the danger of having unpatched systems, it is sobering to hear that the vCenter Server vulnerability tracked as CVE-2021-21985 is being actively exploited. I had read the article here over the weekend showing the…