Known Exploited Vulnerabilities November 03, 2021 · CISA KEV Catalog

CVE-2021-21985: VMware vCenter Server Improper Input Validation Vulnerability

VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-21985 VMware
Related: CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability Known Exploited Vulnerabilities · Mar 04, 2025
CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability Known Exploited Vulnerabilities · Mar 04, 2025
CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Known Exploited Vulnerabilities · Mar 04, 2025