vmware ace

Name: vmware ace
Brand: vmware

productUS

cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical26high17medium1low

updated 2026-10-28

vulnerabilities (44)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2008-3892US	high10.0	24.4% (98th)	Exploit	1.0.7	2008-09-03	2 versions
CVE-2009-3732US	high10.0	16.2% (97th)	Exploit	2.5.4	2010-04-12	2 versions
CVE-2009-3707US	medium5.0	11.1% (96th)	Exploit	no fix	2009-10-16	7 versions
CVE-2009-0177US	medium5.0	8.64% (95th)	Exploit	no fix	2009-01-20	2 versions
CVE-2009-1244US	medium6.8	2.27% (83rd)	Exploit	no fix	2009-04-13	17 versions
CVE-2009-2267US	medium6.9	1.75% (78th)	Exploit	no fix	2009-11-02	3 versions
CVE-2007-0063US	high10.0	20.4% (97th)	—	1.0.3	2007-09-21	2 versions
CVE-2005-4459US	high10.0	14.2% (97th)	—	no fix	2005-12-21	= 1.0.1
CVE-2007-0062US	high10.0	7.62% (95th)	—	no fix	2007-09-21	2 versions
CVE-2007-0061US	high10.0	6.50% (94th)	—	1.0.3	2007-09-21	2 versions
CVE-2009-2628US	high9.3	5.57% (93rd)	—	no fix	2009-09-08	3 versions
CVE-2009-0199US	high9.3	5.02% (92nd)	—	no fix	2009-09-08	3 versions
CVE-2009-0909US	high9.3	4.63% (92nd)	—	no fix	2009-04-06	= 2.5.1
CVE-2008-3691US	high10.0	3.91% (90th)	—	2.0.5	2008-09-03	2 versions
CVE-2010-1141US	high8.5	3.80% (90th)	—	no fix	2010-04-12	4 versions
CVE-2008-3696US	high10.0	3.56% (89th)	—	2.0.5	2008-09-03	2 versions
CVE-2008-3692US	high10.0	3.56% (89th)	—	1.0.7	2008-09-03	2 versions
CVE-2008-3693US	high10.0	3.56% (89th)	—	2.0.5	2008-09-03	2 versions
CVE-2008-3694US	high10.0	3.56% (89th)	—	1.0.7	2008-09-03	2 versions
CVE-2008-3695US	high10.0	3.56% (89th)	—	2.0.5	2008-09-03	2 versions
CVE-2009-0910US	medium6.8	2.81% (86th)	—	no fix	2009-04-06	= 2.5.1
CVE-2009-4811US	medium5.0	2.76% (86th)	—	no fix	2010-04-27	7 versions
CVE-2008-1392US	high10.0	2.73% (86th)	—	no fix	2008-03-20	≤ 2.0
CVE-2010-1138US	medium5.0	2.29% (83rd)	—	no fix	2010-04-12	5 versions
CVE-2008-1364US	high7.8	2.04% (81st)	—	no fix	2008-03-20	2 versions
CVE-2008-1340US	high7.1	1.74% (78th)	—	no fix	2008-03-20	2 versions
CVE-2010-1142US	high8.5	1.64% (76th)	—	no fix	2010-04-12	4 versions
CVE-2009-0908US	medium6.4	1.24% (69th)	—	no fix	2009-04-06	17 versions
CVE-2007-5025US	high9.3	1.16% (67th)	—	no fix	2007-09-21	= 1.0.3_build_54075
CVE-2007-4497US	medium5.5	0.83% (57th)	—	no fix	2007-09-21	2 versions
CVE-2007-4496US	medium6.5	0.68% (52nd)	—	no fix	2007-09-21	2 versions
CVE-2008-2100US	high7.2	0.60% (48th)	—	no fix	2008-06-05	2 versions
CVE-2008-0923US	medium6.9	0.49% (42nd)	—	no fix	2008-02-26	5 versions
CVE-2008-3698US	high7.2	0.46% (39th)	—	2.0.5	2008-09-03	2 versions
CVE-2008-1363US	high7.2	0.42% (36th)	—	1.0.5	2008-03-20	2 versions
CVE-2008-4915US	medium6.9	0.41% (35th)	—	no fix	2008-11-10	2 versions
CVE-2007-5671US	medium4.4	0.39% (33rd)	—	no fix	2008-06-05	5 versions
CVE-2007-5438US	low1.9	0.37% (30th)	—	no fix	2007-10-13	14 versions
CVE-2008-1362US	high7.2	0.36% (30th)	—	no fix	2008-03-20	2 versions
CVE-2009-1146US	medium4.9	0.36% (29th)	—	no fix	2009-04-06	17 versions
CVE-2008-1361US	medium6.8	0.35% (28th)	—	no fix	2008-03-20	6 versions
CVE-2009-1147US	high7.2	0.34% (27th)	—	no fix	2009-04-06	20 versions
CVE-2009-1805US	medium4.0	0.33% (26th)	—	no fix	2009-06-01	19 versions
CVE-2007-5023US	medium6.9	0.32% (25th)	—	no fix	2007-09-21	1.0 → 1.0.3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-26413 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer8 CVEs
CWE-399CWE-3996 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-134Use of Externally-Controlled Format String3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-16CWE-161 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE44 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan