Vmware Cloud Foundation vulnerabilities

• broadcom vmware esx, vmware esx, cloud foundation +3 more +5 more ESX insufficient logging vulnerability CVE-2026-41709 In KEV 2.7 LowJuly 30, 2026
• vmware esx, fusion, workstation +3 more +5 more Out-of-bounds read vulnerability CVE-2026-41703 7.6 HighJuly 30, 2026
• vmware esx, cloud foundation, telco cloud platform +1 more +3 more VMXNET3 out-of-bounds write vulnerability CVE-2026-47876 9.3 CriticalJuly 30, 2026
• vmware vcenter, cloud foundation, telco cloud infrastructure +3 more +5 more vCenter authentication-bypass vulnerability CVE-2026-59309 9.8 CriticalJuly 30, 2026
• broadcom vmware vcenter, vmware vcenter, cloud foundation +4 more +6 more vCenter directory-traversal vulnerability CVE-2026-59310 In KEVPublic exploit EPSS 61.7% 9.8 CriticalJuly 30, 2026
• vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 more VMware Aria Operations privilege escalation vulnerability CVE-2026-22721 6.2 MediumFebruary 25, 2026
• vmware aria operations, cloud foundation, telco cloud infrastructure +2 more +4 more VMware Aria Operations stored cross-site scripting vulnerability CVE-2026-22720 8.0 HighFebruary 25, 2026
• broadcom vmware aria operations, vmware aria operations, cloud foundation +3 more +5 more VMware Aria Operations command injection vulnerability CVE-2026-22719 In KEV EPSS 18.3% 8.1 HighFebruary 25, 2026
• vmware vcenter, cloud foundation, telco cloud infrastructure +2 more +4 more Header injection vulnerability CVE-2025-41250 8.5 HighSeptember 29, 2025
• vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 more VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) CVE-2025-41245 4.9 MediumSeptember 29, 2025
• broadcom vmware aria operations and vmware tools, vmware aria operations, tools +7 more +9 more VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) CVE-2025-41244 In KEVPublic exploitFix available EPSS 15.8% 7.8 HighSeptember 29, 2025
• vmware vcenter, cloud foundation, telco cloud infrastructure +1 more +3 more Denial-of-service vulnerability CVE-2025-41241 4.4 MediumJuly 29, 2025
• vmware esxi, fusion, tools +4 more +6 more vSockets information-disclosure vulnerability CVE-2025-41239 7.1 HighJuly 15, 2025
• vmware esxi, fusion, workstation +3 more +5 more PVSCSI heap-overflow vulnerability CVE-2025-41238 9.3 CriticalJuly 15, 2025
• vmware esxi, fusion, workstation +4 more +6 more VMCI integer-underflow vulnerability CVE-2025-41237 9.3 CriticalJuly 15, 2025
• vmware esxi, fusion, workstation +3 more +5 more VMXNET3 integer-overflow vulnerability CVE-2025-41236 9.3 CriticalJuly 15, 2025
• vmware esxi, vcenter server, cloud foundation +2 more +4 more VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability CVE-2025-41228 Public exploit 4.3 MediumMay 20, 2025
• vmware esxi, fusion, workstation +3 more +5 more Denial-of-Service Vulnerability CVE-2025-41227 5.5 MediumMay 20, 2025
• vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 more Guest Operations Denial-of-Service Vulnerability CVE-2025-41226 6.8 MediumMay 20, 2025
• vmware vcenter server, cloud foundation, telco cloud infrastructure +1 more +3 more VMware vCenter Server authenticated command-execution vulnerability CVE-2025-41225 8.8 HighMay 20, 2025
• vmware cloud foundation VMware Cloud Foundation Missing Authorisation Vulnerability CVE-2025-41231 7.3 HighMay 20, 2025
• vmware cloud foundation VMware Cloud Foundation Information Disclosure Vulnerability CVE-2025-41230 7.5 HighMay 20, 2025
• vmware cloud foundation VMware Cloud Foundation Directory Traversal Vulnerability CVE-2025-41229 8.2 HighMay 20, 2025
• vmware aria automation, cloud foundation, telco cloud platform +2 more VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) CVE-2025-22249 8.2 HighMay 13, 2025
• vmware esxi, esxi, workstation, and fusion, fusion +4 more +6 more VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an... CVE-2025-22226 In KEV 7.1 HighMarch 4, 2025
• vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 more VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within... CVE-2025-22225 In KEV 8.2 HighMarch 4, 2025
• vmware esxi, workstation, cloud foundation +3 more +5 more VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that... CVE-2025-22224 In KEV 9.3 CriticalMarch 4, 2025
• vmware aria automation, cloud foundation (vmware aria automation) +1 more VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215) CVE-2025-22215 4.3 MediumJanuary 8, 2025
• vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more Privilege escalation vulnerability CVE-2024-38813 In KEV EPSS 17.4% 7.5 HighSeptember 17, 2024
• vmware vcenter server, broadcom vmware cloud foundation, vmware vcenter server +1 more +3 more Heap-overflow vulnerability CVE-2024-38812 In KEV EPSS 54.6% 9.8 CriticalSeptember 17, 2024
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network... CVE-2024-37087 5.3 MediumJune 25, 2024
• vmware esxi, cloud foundation +1 more VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local... CVE-2024-37086 6.8 MediumJune 25, 2024
• vmware esxi, cloud foundation +1 more VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient... CVE-2024-37085 In KEVPublic exploit EPSS 26.8% 6.8 MediumJune 25, 2024
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains multiple local privilege escalation vulnerabilities due to... CVE-2024-37081 Public exploit 7.8 HighJune 18, 2024
• vmware vcenter server, cloud foundation +1 more vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... CVE-2024-37080 EPSS 12.5% 9.8 CriticalJune 18, 2024
• vmware vcenter server, broadcom vmware vcenter server, vmware cloud foundation +2 more vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... CVE-2024-37079 In KEV EPSS 22.4% 9.8 CriticalJune 18, 2024
• vmware vcenter server, cloud foundation, cloud foundation (vcenter server) +2 more The vCenter Server contains a partial file read vulnerability. A malicious actor with... CVE-2024-22275 Public exploit 4.9 MediumMay 21, 2024
• vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more The vCenter Server contains an authenticated remote code execution vulnerability. A malicious... CVE-2024-22274 Public exploit 7.2 HighMay 21, 2024
• vmware esxi, fusion, workstation +2 more +4 more The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write... CVE-2024-22273 8.1 HighMay 21, 2024
• vmware esxi, fusion, workstation +1 more +3 more Information disclosure vulnerability CVE-2024-22255 7.1 HighMarch 5, 2024
• vmware esxi, broadcom vmware cloud foundation, vmware cloud foundation +2 more Out-of-bounds write vulnerability CVE-2024-22254 7.9 HighMarch 5, 2024
• vmware esxi, fusion, workstation +1 more +3 more Use-after-free vulnerability CVE-2024-22253 9.3 CriticalMarch 5, 2024
• vmware esxi, fusion, workstation +1 more +3 more Use-after-free vulnerability CVE-2024-22252 9.3 CriticalMarch 5, 2024
• vmware vcenter server, cloud foundation (vmware vcenter server) +1 more VMware vCenter Server Partial Information Disclosure Vulnerability CVE-2023-34056 4.3 MediumOctober 25, 2023
• vmware vcenter server, cloud foundation, cloud foundation (vmware vcenter server) +2 more VMware vCenter Server Out-of-Bounds Write Vulnerability CVE-2023-34048 In KEV EPSS 99.2% 9.8 CriticalOctober 25, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of... CVE-2023-20896 5.9 MediumJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the... CVE-2023-20895 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of... CVE-2023-20894 EPSS 33.9% 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the... CVE-2023-20893 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more VMware vCenter Server heap-overflow vulnerability CVE-2023-20892 8.1 HighJune 22, 2023
• Show olderLoading…