VMware ESXi
25 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-41239 | 8.0 – < ESXi80U3f-24784735 ; 8.0 – < ESXi80U2e-24789317 ; 7.0 – < ESXi70U3w-24784741 | vSockets information-disclosure vulnerability | HIGH 7.1 | 3.2 % | ||
| CVE-2025-41238 | 8.0 – < ESXi80U3f-24784735 ; 8.0 – < ESXi80U2e-24789317 ; 7.0 – < ESXi70U3w-24784741 | PVSCSI heap-overflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41237 | 8.0 – < ESXi80U3f-24784735 ; 8.0 – < ESXi80U2e-24789317 ; 7.0 – < ESXi70U3w-24784741 | VMCI integer-underflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41236 | 8.0 – < ESXi80U3f-24784735 ; 8.0 – < ESXi80U2e-24789317 ; 7.0 – < ESXi70U3w-24784741 | VMXNET3 integer-overflow vulnerability | CRITICAL 9.3 | 2.6 % | ||
| CVE-2025-41228 | 8.0 – < ESXi80U3se-24659227 ; 7.0 – < ESXi70U3sv-24723868 | VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability | MEDIUM 4.3 | 0.9 % | ||
| CVE-2025-41227 | 8.0 – < ESXi80U3se-24659227 ; 7.0 – < ESXi70U3sv-24723868 | Denial-of-Service Vulnerability | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-41226 | 8.0 – < ESXi80U3se-24659227 ; 7.0 – < ESXi70U3sv-24723868 | Guest Operations Denial-of-Service Vulnerability | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-22224 | 8.0 – < ESXi80U3d-24585383 ; 8.0 – < ESXi80U2d-24585300 ; 7.0 – < ESXi70U3s-24585291 | VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious ac | CRITICAL 9.3 | 1.6 % | KEV | |
| CVE-2020-3955 | ESXi 6.5 without patch ESXi650-201912104-SG ; ESXi 6.7 without patch ESXi670-202004103-SG | ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML w | CRITICAL 9.3 | 1.3 % | ||
| CVE-2019-5528 | ESXi 6.5 without patch ESXi650-201907201-UG | VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is availabl | MEDIUM 5.3 | 1.7 % | ||
| CVE-2019-5517 | 6.7 before ESXi670-201904101-SG ; 6.5 before ESXi650-201903001 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus | MEDIUM 6.8 | 1.1 % | ||
| CVE-2019-5520 | 6.7 before ESXi670-201904101-SG ; 6.5 before ESXi650-201903001 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus | MEDIUM 5.9 | 1.0 % | ||
| CVE-2019-5516 | 6.7 before ESXi670-201904101-SG ; 6.5 before ESXi650-201903001 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus | MEDIUM 6.8 | 1.7 % | ||
| CVE-2018-6974 | 6.7 before ESXi670-201810101-SG ; 6.5 before ESXi650-201808401-BG ; 6.0 before ESXi600-201808401-BG | VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x befor | HIGH 8.8 | 0.5 % | ||
| CVE-2018-6977 | 6.7, 6.5, 6.0 | VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infi | MEDIUM 6.5 | 0.4 % | ||
| CVE-2018-6972 | 6.7 before ESXi670-201806401-BG ; 6.5 before ESXi650-201806401-BG ; 6.0 before ESXi600-201806401-BG ; … | VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806 | MEDIUM 6.5 | 3.0 % | ||
| CVE-2017-4941 | 6.0 before ESXi600-201711101-SG ; 5.5 ESXi550-201709101-SG | VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) con | HIGH 8.8 | 3.2 % | ||
| CVE-2017-4940 | 6.5 before ESXi650-201712103-SG ; 6.0 before ESXi600-201711103-SG ; 5.5 before ESXi550-201709102-SG) | The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) c | MEDIUM 6.1 | 0.9 % | ||
| CVE-2017-4933 | 6.5 before ESXi650-201710401-BG | VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that | HIGH 8.8 | 3.6 % | ||
| CVE-2017-4925 | 6.5 without patch ESXi650-201707101-SG ; 6.0 without patch ESXi600-201706101-SG ; 5.5 without patch ESXi550-201709101-SG | VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG | MEDIUM 5.5 | 0.4 % | ||
| CVE-2017-4924 | 6.5 without patch ESXi650-201707101-SG | VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of- | HIGH 8.8 | 0.6 % | ||
| CVE-2017-4905 | 6.5 without patch ESXi650-201703410-SG ; 6.0 U3 without patch ESXi600-201703401-SG ; 6.0 U2 without patch ESXi600-201703403-SG ; … | VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6. | MEDIUM 5.5 | 1.2 % | ||
| CVE-2017-4904 | 6.5 without patch ESXi650-201703410-SG ; 6.0 U3 without patch ESXi600-201703401-SG ; 6.0 U2 without patch ESXi600-201703403-SG ; … | The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch E | HIGH 8.8 | 0.4 % | ||
| CVE-2017-4903 | 6.5 without patch ESXi650-201703410-SG ; 6.0 U3 without patch ESXi600-201703401-SG ; 6.0 U2 without patch ESXi600-201703403-SG ; … | VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6. | HIGH 8.8 | 0.4 % | ||
| CVE-2017-4902 | 6.5 without patch ESXi650-201703410-SG ; 5.5 without patch ESXi550-201703401-SG | VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5 | HIGH 8.8 | 0.5 % |