VMware Cloud Foundation
19 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-41231 | 5.x – < 5.2.1.2 ; 4.5.x | VMware Cloud Foundation Missing Authorisation Vulnerability | HIGH 7.3 | 0.2 % | ||
| CVE-2025-22226 | 5.x, 4.5.x | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor | HIGH 7.1 | 1.6 % | KEV | |
| CVE-2025-22225 | 5.x, 4.5.x | VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary ker | HIGH 8.2 | 1.0 % | KEV | |
| CVE-2024-38813 | 5.x ; 4.x | Privilege escalation vulnerability | CRITICAL 9.8 | 17 % | KEV | |
| CVE-2024-38812 | 5.x ; 4.x | Heap-overflow vulnerability | CRITICAL 9.8 | 55 % | KEV | |
| CVE-2024-37087 | 5.x ; 4.x | The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-o | MEDIUM 5.3 | 0.7 % | ||
| CVE-2024-37086 | 5.x ; 4.x | VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with | MEDIUM 6.8 | 0.2 % | ||
| CVE-2024-37085 | 5.x ; 4.x | VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain fu | HIGH 7.2 | 27 % | KEV | |
| CVE-2024-37081 | 5.x ; 4.x | The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user | HIGH 7.8 | 5.0 % | ||
| CVE-2024-37080 | 5.x ; 4.x | vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to | CRITICAL 9.8 | 12 % | ||
| CVE-2024-37079 | 5.x ; 4.x | vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to | CRITICAL 9.8 | 22 % | KEV | |
| CVE-2024-22255 | 5.x ; 4.x | Information disclosure vulnerability | HIGH 7.1 | 2.3 % | ||
| CVE-2024-22254 | 5.x ; 4.x | Out-of-bounds write vulnerability | HIGH 8.2 | 0.5 % | ||
| CVE-2024-22253 | 5.x ; 4.x | Use-after-free vulnerability | CRITICAL 9.3 | 0.6 % | ||
| CVE-2024-22252 | 5.x ; 4.x | Use-after-free vulnerability | CRITICAL 9.3 | 3.5 % | ||
| CVE-2022-22939 | VMware Cloud Foundation 4.x (before 4.3.1.1) and 3.x | VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log fil | MEDIUM 4.9 | 0.8 % | ||
| CVE-2021-21974 | 4.x before 4.2 and 3.x | OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflo | HIGH 8.8 | 45 % | ||
| CVE-2021-21972 | 4.x before 4.2 ; 3.x before 3.10.1.2 | The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-21973 | 4.x before 4.2 ; 3.x before 3.10.1.2 | The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Serv | MEDIUM 5.3 | 88 % | KEV |