basicsecurity.net
Proof, not just disclosure.
Threats / Contributors / VMware
Vendor security team contributor

VMware

CNA assigner on 31 of 31 known-exploited records. Every aggregate on this page is recomputed from the records listed below — each one already cited to its public source.

No vendor advisory domain is cited for this contributor in the corpus — its credit here is as a CNA/finder. Home URL is a stated coverage gap.

31
records cited in
deterministic count
0
finder / reporter credits
CVE.org credits
31
CVE records catalogued (CNA)
assigner
58%
avg modeled exploit prob.
FIRST EPSS, 31/31
29%
ransomware-associated
9 of 31 · CISA flag
01

Known for

— recomputed from this contributor’s own records
SurfacesHypervisor / virtualization (29), Application / other (1), Edge / remote-access infra (1)
WeaknessInjection (9), Memory safety (6), Authorization / access control (5), Path traversal / file (3), Authentication (2)
PortfolioVMware (26), Broadcom (3), Omnissa (1), VMware Tanzu (1)
02

Narrative reach

— how far this contributor’s records carry an attacker, front door → lights out
1Front door
31reach this stage
→
2Keys to the kingdom
31reach this stage
→
3Lateral reach
31reach this stage
→
4Data at risk
5reach this stage
→
5Lights out
1reach this stage

Furthest any of these records carries an attacker: 5 · Lights out. 5 of 31 narrative-framed records reach data-at-risk or lights-out. (furthest-position idiom, reused from the landing map; the stage mapping is a model output over cited evidence.)

03

Recent highlights

— this contributor’s newest known-exploited records
CVE-2021-22054Omnissa98%KEVCVE-2026-22719Broadcom17%KEVCVE-2024-37079Broadcom22%KEVCVE-2025-41244Broadcom8%KEVCVE-2025-22224VMware2%KEVCVE-2025-22225VMware1%RWKEV
04

Every record they’re cited in

— all 31, each linked to its cited source

This is the evidence behind every number above. Sorted ransomware-first, then by modeled exploit probability.

CVE-2021-21985VMware100%RWKEVCVE-2021-22005VMware100%RWKEVCVE-2022-22954VMware100%RWKEVCVE-2021-21972VMware100%RWKEVCVE-2019-5544VMware97%RWKEVCVE-2020-3992VMware83%RWKEVCVE-2021-21975VMware78%RWKEVCVE-2024-37085VMware27%RWKEVCVE-2025-22225VMware1%RWKEVCVE-2022-22963VMware Tanzu100%KEVCVE-2022-22965VMware100%KEVCVE-2023-34048VMware99%KEVCVE-2022-22947VMware98%KEVCVE-2023-20887VMware98%KEVCVE-2021-22054Omnissa98%KEVCVE-2020-3952VMware90%KEVCVE-2021-21973VMware88%KEVCVE-2018-6961VMware86%KEVCVE-2024-38812VMware53%KEVCVE-2021-22017VMware47%KEVCVE-2022-22960VMware37%KEVCVE-2020-4006VMware24%KEVCVE-2024-37079Broadcom22%KEVCVE-2026-22719Broadcom17%KEVCVE-2024-38813VMware15%KEVCVE-2022-22948VMware14%KEVCVE-2023-20867VMware14%KEVCVE-2025-41244Broadcom8%KEVCVE-2020-3950VMware7%KEVCVE-2025-22226VMware2%KEVCVE-2025-22224VMware2%KEV
05

Coverage & confidence

— what this profile claims, and what it does not

Established (cited)

  • Cited in 31 known-exploited records — the list below; every one links to its public source.
  • Catalogued 31 CVE record(s) as the CNA assigner (from CVE.org).

    • Coverage gaps — stated, not hidden

  • This profile is an aggregation: it asserts only what the listed records already cite — no new external claim about the contributor is made.
  • The TYPE badge and the narrative-stage mapping are editorial (our call), labeled as such, not a sourced fact.
  • No vendor advisory home domain is cited for this contributor in the corpus.