CVE Tools
Track your stack

Broadcom-inc

382 CVEs tracked since 2011. Since Jun 2015, 25 of them reached CISA KEV.

Broadcom-inc CVEs per month

Jun 2015 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Broadcom-inc CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2015-0630
2015-070
2015-080
2015-090
2015-1020
2015-110
2015-120
2016-010
2016-020
2016-030
2016-040
2016-0520
2016-0670
2016-0710
2016-08no snapshot
2016-090
2016-100
2016-11no snapshot
2016-1230
2017-01no snapshot
2017-021 or fewer
2017-031 or fewer
2017-04no snapshot
2017-051 or fewer
2017-06no snapshot
2017-071 or fewer
2017-082 or fewer
2017-091 or fewer
2017-101 or fewer
2017-11no snapshot
2017-121 or fewer
2018-0120
2018-021 or fewer
2018-032 or fewer
2018-04no snapshot
2018-05no snapshot
2018-062 or fewer
2018-072 or fewer
2018-082 or fewer
2018-092 or fewer
2018-1030
2018-11no snapshot
2018-122 or fewer
2019-01no snapshot
2019-0210
2019-03no snapshot
2019-04no snapshot
2019-051 or fewer
2019-06no snapshot
2019-072 or fewer
2019-082 or fewer
2019-0940
2019-1080
2019-1150
2019-1221
2020-012 or fewer
2020-0250
2020-0351
2020-04no snapshot
2020-05no snapshot
2020-06100
2020-07no snapshot
2020-082 or fewer
2020-0960
2020-1071
2020-1151
2020-1220
2021-012 or fewer
2021-0242
2021-03no snapshot
2021-0420
2021-0571
2021-0670
2021-0730
2021-08121
2021-09192
2021-1040
2021-1130
2021-122 or fewer
2022-012 or fewer
2022-0270
2022-0362
2022-0482
2022-0560
2022-0630
2022-0740
2022-08160
2022-093 or fewer
2022-10120
2022-113 or fewer
2022-12100
2023-0170
2023-0260
2023-03no snapshot
2023-0470
2023-0570
2023-06112
2023-0740
2023-084 or fewer
2023-093 or fewer
2023-10131
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-02100
2024-0360
2024-0440
2024-0590
2024-0682
2024-074 or fewer
2024-084 or fewer
2024-0932
2024-1040
2024-1180
2024-123 or fewer
2025-0180
2025-0250
2025-0353
2025-044 or fewer
2025-05110
2025-0670
2025-0760
2025-084 or fewer
2025-0981
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-1011 or fewer
2026-113 or fewer

Products

The products that kept showing up in Broadcom-inc's monthly top three, with their CVEs summed over those months.

  1. VMware Cloud Foundation15032 months
  2. VMware ESXi4817 months
  3. VMware Fusion4615 months
  4. VMware Vcenter Server4511 months
  5. VMware Workstation3613 months
  6. VMware Aria Suite Lifecycle264 months
  7. VMware Aria Operations205 months
  8. VMware Aria Automation175 months
  9. VMware Telco Cloud Platform174 months
  10. VMware Telco Cloud Infrastructure164 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Broadcom-inc.

  1. CVE-2026-41705Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x: affected from 1.0.0 through latest 1.0.x; upg...8.6
  2. CVE-2026-22743Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore7.5
  3. CVE-2026-22742Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching8.6
  4. CVE-2026-22732Under Some Conditions Spring Security HTTP Headers Are not Written9.1
  5. CVE-2026-22730CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter8.8
  6. CVE-2026-22717VMware Workstation out-of-bound read vulnerability2.7
  7. CVE-2026-22716VMware Workstation out-of-bounds write vulnerability5.0
  8. CVE-2026-22715VMware Workstation/Fusion NAT vulnerability5.9
  9. CVE-2026-22721VMware Aria Operations privilege escalation vulnerability6.2
  10. CVE-2026-22720VMware Aria Operations stored cross-site scripting vulnerability8.0
  11. CVE-2026-22719VMware Aria Operations command injection vulnerability8.1
  12. CVE-2025-22234Spring Security - BCrypt Password Encoder maximum password length breaks timing attack mitigation5.3
  13. CVE-2025-41252Username enumeration vulnerability7.5
  14. CVE-2025-41251Weak password recovery vulnerability8.1
  15. CVE-2025-41250Header injection vulnerability8.5

The record

Peak rank
#25 in Jun 2016
Busiest month shown
Sep 2021, 19 CVEs
Months with a KEV entry
16 since Jun 2015
Monthly snapshots
69 since 2011
Broadcom-inc's full record, month by month