VMware ESXi
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-22225 | 8.0 – < ESXi80U3d-24585383 ; 8.0 – < ESXi80U2d-24585300 ; 7.0 – < ESXi70U3s-24585291 | VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary ker | HIGH 8.2 | 1.0 % | KEV | |
| CVE-2024-37085 | 8.0 – < ESXi80U3-24022510 ; 7.0 | VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain fu | HIGH 7.2 | 27 % | KEV | |
| CVE-2024-22273 | 8.0 – < ESXi80U2sb-23305545 ; 7.0 – < ESXi70U3sq-23794019 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access t | HIGH 8.1 | 0.2 % | ||
| CVE-2024-22255 | 8.0 – < ESXi80U2sb-23305545 ; 8.0 – < ESXi80U1d-23299997 ; 7.0 – < ESXi70U3p-23307199 | Information disclosure vulnerability | HIGH 7.1 | 2.3 % | ||
| CVE-2024-22254 | 8.0 – < ESXi80U2sb-23305545 ; 8.0 – < ESXi80U1d-23299997 ; 7.0 – < ESXi70U3p-23307199 | Out-of-bounds write vulnerability | HIGH 8.2 | 0.5 % | ||
| CVE-2024-22253 | 8.0 – < ESXi80U2sb-23305545 ; 8.0 – < ESXi80U1d-23299997 ; 7.0 – < ESXi70U3p-23307199 | Use-after-free vulnerability | CRITICAL 9.3 | 0.6 % | ||
| CVE-2024-22252 | 8.0 – < ESXi80U2sb-23305545 ; 8.0 – < ESXi80U1d-23299997 ; 7.0 – < ESXi70U3p-23307199 | Use-after-free vulnerability | CRITICAL 9.3 | 3.5 % | ||
| CVE-2022-31681 | VMware ESXi (7.0 prior to ESXi70U3sf-20036586, 6.7 prior to ESXi670-202210101-SG & 6.5 prior to ESXi650-202210101-SG) | VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a den | MEDIUM 6.5 | 0.2 % | ||
| CVE-2021-21974 | 7.0 before ESXi70U1c-17325551 ; 6.7 before ESXi670-202102401-SG ; 6.5 before ESXi650-202102101-SG | OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflo | HIGH 8.8 | 45 % | ||
| CVE-2020-4004 | 7.0 before ESXi70U1b-17168206 ; 6.7 before ESXi670-202011101-SG ; 6.5 before ESXi650-202011301-SG | VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstation (15.x before 15.5 | HIGH 8.2 | 0.4 % | ||
| CVE-2020-4005 | 7.0 before ESXi70U1b-17168206 ; 6.7 before ESXi670-202011101-SG ; 6.5 before ESXi650-202011301-SG | VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalatio | HIGH 7.8 | 0.4 % | ||
| CVE-2020-3992 | VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) | OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a | CRITICAL 9.8 | 83 % | KEV |