Skip to content
Vmware Telco Cloud Platform vulnerabilities
-
broadcom vmware esx, vmware esx, cloud foundation +3 more +5 more
ESX insufficient logging vulnerability
CVE-2026-41709
In KEV
2.7 Low
-
vmware esx, fusion, workstation +3 more +5 more
Out-of-bounds read vulnerability
CVE-2026-41703
7.6 High
-
vmware esx, cloud foundation, telco cloud platform +1 more +3 more
VMXNET3 out-of-bounds write vulnerability
CVE-2026-47876
9.3 Critical
-
vmware vcenter, cloud foundation, telco cloud infrastructure +3 more +5 more
vCenter authentication-bypass vulnerability
CVE-2026-59309
9.8 Critical
-
broadcom vmware vcenter, vmware vcenter, cloud foundation +4 more +6 more
vCenter directory-traversal vulnerability
CVE-2026-59310
In KEVPublic exploit
EPSS 61.7%
9.8 Critical
-
vmware cloud foundation, aria operations, telco cloud platform +1 more +3 more
VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
CVE-2026-41724
8.0 High
-
vmware cloud foundation, aria operations, telco cloud platform +2 more +4 more
VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
CVE-2026-41723
8.0 High
-
vmware cloud foundation, aria operations, telco cloud platform +2 more +4 more
VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
CVE-2026-41722
8.0 High
-
vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 more
VMware Aria Operations privilege escalation vulnerability
CVE-2026-22721
6.2 Medium
-
vmware aria operations, cloud foundation, telco cloud infrastructure +2 more +4 more
VMware Aria Operations stored cross-site scripting vulnerability
CVE-2026-22720
8.0 High
-
broadcom vmware aria operations, vmware aria operations, cloud foundation +3 more +5 more
VMware Aria Operations command injection vulnerability
CVE-2026-22719
In KEV
EPSS 18.3%
8.1 High
-
vmware vcenter, cloud foundation, telco cloud infrastructure +2 more +4 more
Header injection vulnerability
CVE-2025-41250
8.5 High
-
vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 more
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
CVE-2025-41245
4.9 Medium
-
broadcom vmware aria operations and vmware tools, vmware aria operations, tools +7 more +9 more
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
CVE-2025-41244
In KEVPublic exploitFix available
EPSS 16.4%
7.8 High
-
vmware vcenter, cloud foundation, telco cloud infrastructure +1 more +3 more
Denial-of-service vulnerability
CVE-2025-41241
4.4 Medium
-
vmware esxi, fusion, tools +4 more +6 more
vSockets information-disclosure vulnerability
CVE-2025-41239
7.1 High
-
vmware esxi, fusion, workstation +3 more +5 more
PVSCSI heap-overflow vulnerability
CVE-2025-41238
9.3 Critical
-
vmware esxi, fusion, workstation +4 more +6 more
VMCI integer-underflow vulnerability
CVE-2025-41237
9.3 Critical
-
vmware esxi, fusion, workstation +3 more +5 more
VMXNET3 integer-overflow vulnerability
CVE-2025-41236
9.3 Critical
-
vmware esxi, vcenter server, cloud foundation +2 more +4 more
VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability
CVE-2025-41228
Public exploit
4.3 Medium
-
vmware esxi, fusion, workstation +3 more +5 more
Denial-of-Service Vulnerability
CVE-2025-41227
5.5 Medium
-
vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 more
Guest Operations Denial-of-Service Vulnerability
CVE-2025-41226
6.8 Medium
-
vmware vcenter server, cloud foundation, telco cloud infrastructure +1 more +3 more
VMware vCenter Server authenticated command-execution vulnerability
CVE-2025-41225
8.8 High
-
vmware aria automation, cloud foundation, telco cloud platform +2 more
VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)
CVE-2025-22249
8.2 High
-
vmware esxi, esxi, workstation, and fusion, fusion +4 more +6 more
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an...
CVE-2025-22226
In KEV
7.1 High
-
vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 more
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within...
CVE-2025-22225
In KEV
8.2 High
-
vmware esxi, workstation, cloud foundation +3 more +5 more
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that...
CVE-2025-22224
In KEV
9.3 Critical