Vmware Cloud Foundation vulnerabilities

• vmware cloud foundation, aria operations, telco cloud platform +1 more +3 more VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) CVE-2026-41724 8.0 HighJune 8, 2026
• vmware cloud foundation, aria operations, telco cloud platform +2 more +4 more VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) CVE-2026-41723 8.0 HighJune 8, 2026
• vmware cloud foundation, aria operations, telco cloud platform +2 more +4 more VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) CVE-2026-41722 8.0 HighJune 8, 2026
• vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 more VMware Aria Operations privilege escalation vulnerability CVE-2026-22721 6.2 MediumFebruary 25, 2026
• vmware aria operations, cloud foundation, telco cloud infrastructure +2 more +4 more VMware Aria Operations stored cross-site scripting vulnerability CVE-2026-22720 8.0 HighFebruary 25, 2026
• broadcom vmware aria operations, vmware aria operations, cloud foundation +3 more +5 more VMware Aria Operations command injection vulnerability CVE-2026-22719 In KEV EPSS 18.3% 8.1 HighFebruary 25, 2026
• broadcom vmware aria operations and vmware tools, vmware aria operations, tools +7 more +9 more VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) CVE-2025-41244 In KEVPublic exploitFix available EPSS 15.8% 7.8 HighSeptember 29, 2025
• broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 more VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to... CVE-2025-22245 5.9 MediumJune 4, 2025
• broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 more VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due... CVE-2025-22244 6.9 MediumJune 4, 2025
• broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 more VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper... CVE-2025-22243 7.5 HighJune 4, 2025
• vmware cloud foundation VMware Cloud Foundation Missing Authorisation Vulnerability CVE-2025-41231 7.3 HighMay 20, 2025
• vmware aria automation, cloud foundation, telco cloud platform +2 more VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) CVE-2025-22249 8.2 HighMay 13, 2025
• vmware esxi, esxi, workstation, and fusion, fusion +4 more +6 more VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an... CVE-2025-22226 In KEV 7.1 HighMarch 4, 2025
• vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 more VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within... CVE-2025-22225 In KEV 8.2 HighMarch 4, 2025
• vmware esxi, workstation, cloud foundation +3 more +5 more VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that... CVE-2025-22224 In KEV 9.3 CriticalMarch 4, 2025
• vmware aria operations, cloud foundation +1 more VMware Aria Operations information disclosure vulnerability (CVE-2025-22222) CVE-2025-22222 7.7 HighJanuary 30, 2025
• vmware aria operations for logs, cloud foundation +1 more VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22221) CVE-2025-22221 5.2 MediumJanuary 30, 2025
• vmware aria operations for logs, cloud foundation +1 more VMware Aria Operations for Logs broken access control vulnerability (CVE-2025-22220) CVE-2025-22220 4.3 MediumJanuary 30, 2025
• vmware aria operations for logs, cloud foundation +1 more VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22219) CVE-2025-22219 6.8 MediumJanuary 30, 2025
• vmware aria operations for logs, cloud foundation +1 more VMware Aria Operations for Logs information disclosure vulnerability CVE-2025-22218 8.5 HighJanuary 30, 2025
• vmware aria operations, cloud foundation +1 more Stored cross-site scripting vulnerability (CVE-2024-38834) CVE-2024-38834 6.5 MediumNovember 26, 2024
• vmware aria operations, cloud foundation +1 more Stored cross-site scripting vulnerability (CVE-2024-38833) CVE-2024-38833 6.8 MediumNovember 26, 2024
• vmware aria operations, cloud foundation +1 more Stored cross-site scripting vulnerability (CVE-2024-38832) CVE-2024-38832 7.1 HighNovember 26, 2024
• vmware aria operations, cloud foundation +1 more Local privilege escalation vulnerability (CVE-2024-38831) CVE-2024-38831 7.8 HighNovember 26, 2024
• vmware aria operations, cloud foundation +1 more Local privilege escalation vulnerability CVE-2024-38830 7.8 HighNovember 26, 2024
• vmware nsx, cloud foundation, nsx-t +2 more VMware NSX contains a content spoofing vulnerability.  An unauthenticated malicious actor may be... CVE-2024-38815 4.3 MediumOctober 9, 2024
• vmware nsx, cloud foundation, nsx-t +2 more VMware NSX contains a local privilege escalation vulnerability.  An authenticated malicious... CVE-2024-38818 6.7 MediumOctober 9, 2024
• vmware nsx, cloud foundation, nsx-t +2 more Mware NSX contains a command injection vulnerability.  A malicious actor with access to the NSX... CVE-2024-38817 6.7 MediumOctober 9, 2024
• vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more Privilege escalation vulnerability CVE-2024-38813 In KEV EPSS 17.4% 7.5 HighSeptember 17, 2024
• vmware vcenter server, broadcom vmware cloud foundation, vmware vcenter server +1 more +3 more Heap-overflow vulnerability CVE-2024-38812 In KEV EPSS 54.6% 9.8 CriticalSeptember 17, 2024
• vmware aria automation, cloud foundation +1 more VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280) CVE-2024-22280 8.5 HighJuly 11, 2024
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network... CVE-2024-37087 5.3 MediumJune 25, 2024
• vmware esxi, cloud foundation +1 more VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local... CVE-2024-37086 6.8 MediumJune 25, 2024
• vmware esxi, cloud foundation +1 more VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient... CVE-2024-37085 In KEVPublic exploit EPSS 26.8% 6.8 MediumJune 25, 2024
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains multiple local privilege escalation vulnerabilities due to... CVE-2024-37081 Public exploit 7.8 HighJune 18, 2024
• vmware vcenter server, cloud foundation +1 more vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... CVE-2024-37080 EPSS 12.5% 9.8 CriticalJune 18, 2024
• vmware vcenter server, broadcom vmware vcenter server, vmware cloud foundation +2 more vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... CVE-2024-37079 In KEV EPSS 22.4% 9.8 CriticalJune 18, 2024
• vmware vcenter server, cloud foundation, cloud foundation (vcenter server) +2 more The vCenter Server contains a partial file read vulnerability. A malicious actor with... CVE-2024-22275 Public exploit 4.9 MediumMay 21, 2024
• vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more The vCenter Server contains an authenticated remote code execution vulnerability. A malicious... CVE-2024-22274 Public exploit 7.2 HighMay 21, 2024
• vmware esxi, fusion, workstation +2 more +4 more The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write... CVE-2024-22273 8.1 HighMay 21, 2024
• vmware esxi, fusion, workstation +1 more +3 more Information disclosure vulnerability CVE-2024-22255 7.1 HighMarch 5, 2024
• vmware esxi, broadcom vmware cloud foundation, vmware cloud foundation +2 more Out-of-bounds write vulnerability CVE-2024-22254 7.9 HighMarch 5, 2024
• vmware esxi, fusion, workstation +1 more +3 more Use-after-free vulnerability CVE-2024-22253 9.3 CriticalMarch 5, 2024
• vmware esxi, fusion, workstation +1 more +3 more Use-after-free vulnerability CVE-2024-22252 9.3 CriticalMarch 5, 2024
• vmware aria operations, cloud foundation +1 more VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor... CVE-2024-22235 6.7 MediumFebruary 21, 2024
• vmware aria automation, cloud foundation +1 more Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious... CVE-2023-34063 9.9 CriticalJanuary 16, 2024
• vmware vcenter server, cloud foundation, cloud foundation (vmware vcenter server) +2 more VMware vCenter Server Out-of-Bounds Write Vulnerability CVE-2023-34048 In KEV EPSS 99.2% 9.8 CriticalOctober 25, 2023
• vmware aria operations, cloud foundation +1 more VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor... CVE-2023-34043 6.7 MediumSeptember 26, 2023
• vmware identity manager, workspace one access, cloud foundation +1 more +3 more VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect... CVE-2023-20884 6.1 MediumMay 30, 2023
• vmware aria operations, cloud foundation +1 more VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with... CVE-2023-20880 6.7 MediumMay 12, 2023
• Show olderLoading…