CVE-20XX-?

VMware Spring Framework CVEs.

Published CVEs affecting VMware Spring Framework, ranked by exploit odds.

1 CVEs · updated 2026-11-06 06:05 UTC

Reset all
  1. CVE-2026-41849

    An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker can exploit this by supplying a specially crafted SpEL expression that triggers excessive resource consumption, resulting in a Denial of Service (DoS). Affected versions: Spring Framework 5.3.0 through 5.3.48.

    Memory safety VMware Spring Framework

    7.5 HIGH 0.3% exploit odds Fix listed

All CVEs affecting VMware Spring Framework that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.