Vmware Cloud Foundation vulnerabilities

• vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 more VMware Aria Operations privilege escalation vulnerability CVE-2026-22721 6.2 MediumFebruary 25, 2026
• vmware aria operations, cloud foundation, telco cloud infrastructure +2 more +4 more VMware Aria Operations stored cross-site scripting vulnerability CVE-2026-22720 8.0 HighFebruary 25, 2026
• broadcom vmware aria operations, vmware aria operations, cloud foundation +3 more +5 more VMware Aria Operations command injection vulnerability CVE-2026-22719 In KEV EPSS 18.3% 8.1 HighFebruary 25, 2026
• vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 more VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) CVE-2025-41245 4.9 MediumSeptember 29, 2025
• broadcom vmware aria operations and vmware tools, vmware aria operations, tools +7 more +9 more VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) CVE-2025-41244 In KEVPublic exploitFix available EPSS 16.4% 7.8 HighSeptember 29, 2025
• vmware esxi, vcenter server, cloud foundation +2 more +4 more VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability CVE-2025-41228 Public exploit 4.3 MediumMay 20, 2025
• vmware vcenter server, cloud foundation, telco cloud infrastructure +1 more +3 more VMware vCenter Server authenticated command-execution vulnerability CVE-2025-41225 8.8 HighMay 20, 2025
• vmware cloud foundation VMware Cloud Foundation Missing Authorisation Vulnerability CVE-2025-41231 7.3 HighMay 20, 2025
• vmware aria automation, cloud foundation, telco cloud platform +2 more VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) CVE-2025-22249 8.2 HighMay 13, 2025
• vmware esxi, esxi, workstation, and fusion, fusion +4 more +6 more VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an... CVE-2025-22226 In KEV 7.1 HighMarch 4, 2025
• vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 more VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within... CVE-2025-22225 In KEV 8.2 HighMarch 4, 2025
• vmware esxi, workstation, cloud foundation +3 more +5 more VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that... CVE-2025-22224 In KEV 9.3 CriticalMarch 4, 2025
• vmware aria automation, cloud foundation (vmware aria automation) +1 more VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215) CVE-2025-22215 4.3 MediumJanuary 8, 2025
• vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more Privilege escalation vulnerability CVE-2024-38813 In KEV EPSS 17.4% 7.5 HighSeptember 17, 2024
• vmware vcenter server, broadcom vmware cloud foundation, vmware vcenter server +1 more +3 more Heap-overflow vulnerability CVE-2024-38812 In KEV EPSS 54.6% 9.8 CriticalSeptember 17, 2024
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network... CVE-2024-37087 5.3 MediumJune 25, 2024
• vmware esxi, cloud foundation +1 more VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local... CVE-2024-37086 6.8 MediumJune 25, 2024
• vmware esxi, cloud foundation +1 more VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient... CVE-2024-37085 In KEVPublic exploit EPSS 26.8% 6.8 MediumJune 25, 2024
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains multiple local privilege escalation vulnerabilities due to... CVE-2024-37081 Public exploit 7.8 HighJune 18, 2024
• vmware vcenter server, cloud foundation +1 more vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... CVE-2024-37080 EPSS 12.5% 9.8 CriticalJune 18, 2024
• vmware vcenter server, broadcom vmware vcenter server, vmware cloud foundation +2 more vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... CVE-2024-37079 In KEV EPSS 22.4% 9.8 CriticalJune 18, 2024
• vmware vcenter server, cloud foundation, cloud foundation (vcenter server) +2 more The vCenter Server contains a partial file read vulnerability. A malicious actor with... CVE-2024-22275 Public exploit 4.9 MediumMay 21, 2024
• vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more The vCenter Server contains an authenticated remote code execution vulnerability. A malicious... CVE-2024-22274 Public exploit 7.2 HighMay 21, 2024
• vmware esxi, fusion, workstation +2 more +4 more The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write... CVE-2024-22273 8.1 HighMay 21, 2024
• vmware esxi, fusion, workstation +1 more +3 more Information disclosure vulnerability CVE-2024-22255 7.1 HighMarch 5, 2024
• vmware esxi, broadcom vmware cloud foundation, vmware cloud foundation +2 more Out-of-bounds write vulnerability CVE-2024-22254 7.9 HighMarch 5, 2024
• vmware esxi, fusion, workstation +1 more +3 more Use-after-free vulnerability CVE-2024-22253 9.3 CriticalMarch 5, 2024
• vmware esxi, fusion, workstation +1 more +3 more Use-after-free vulnerability CVE-2024-22252 9.3 CriticalMarch 5, 2024
• vmware vcenter server, cloud foundation (vmware vcenter server) +1 more VMware vCenter Server Partial Information Disclosure Vulnerability CVE-2023-34056 4.3 MediumOctober 25, 2023
• vmware vcenter server, cloud foundation, cloud foundation (vmware vcenter server) +2 more VMware vCenter Server Out-of-Bounds Write Vulnerability CVE-2023-34048 In KEV EPSS 99.2% 9.8 CriticalOctober 25, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of... CVE-2023-20896 5.9 MediumJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the... CVE-2023-20895 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of... CVE-2023-20894 EPSS 33.9% 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the... CVE-2023-20893 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more VMware vCenter Server heap-overflow vulnerability CVE-2023-20892 8.1 HighJune 22, 2023
• vmware cloud foundation VMware Cloud Foundation contains an information disclosure vulnerability due to logging of... CVE-2022-22939 4.9 MediumFebruary 4, 2022
• vmware esxi, cloud foundation +1 more OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5... CVE-2021-21974 Public exploit EPSS 45.1% 8.8 HighFebruary 24, 2021
• vmware cloud foundation, vcenter server +1 more The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server... CVE-2021-21972 In KEVPublic exploit EPSS 99.9% 9.8 CriticalFebruary 24, 2021
• vmware cloud foundation, vcenter server, vcenter server and cloud foundation +2 more The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to... CVE-2021-21973 In KEVPublic exploit EPSS 88.0% 5.3 MediumFebruary 24, 2021