VC
Product
VMware Cloud Foundation
On CISA KEVExploited in the wildRansomware-linked
17
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 6Low 0
Watch
Add VMware Cloud Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38813 In wildKEV | 9.8 | Sep 17 | Privilege escalation vulnerability Affected: 5.x; 4.x |
| CVE-2024-38812 In wildKEV | 9.8 | Sep 17 | Heap-overflow vulnerability Affected: 5.x; 4.x |
| CVE-2024-37079 In wildKEV | 9.8 | Jun 18 | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Affected: 5.x; 4.x |
| CVE-2021-21972 RansomwareIn wildKEV | 9.8 | Feb 24 | VMware vCenter Server Remote Code Execution Vulnerability Affected: 4.x before 4.2; 3.x before 3.10.1.2 |
| CVE-2025-22225 RansomwareIn wildKEV | 8.2 | Mar 4 | VMware ESXi Arbitrary Write Vulnerability Affected: 5.x, 4.5.x |
| CVE-2024-37085 RansomwareIn wildKEV | 7.2 | Jun 25 | VMware ESXi Authentication Bypass Vulnerability Affected: 5.x; 4.x |
| CVE-2025-22226 In wildKEV | 6.0 | Mar 4 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Affected: 5.x, 4.5.x |
| CVE-2021-21973 In wildKEV | 5.3 | Feb 24 | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability Affected: 4.x before 4.2; 3.x before 3.10.1.2 |
| CVE-2024-37080 | 9.8 | Jun 18 | vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol Affected: 5.x; 4.x |
| CVE-2024-22254 | 8.2 | Mar 5 | Out-of-bounds write vulnerability Affected: 5.x; 4.x |
| CVE-2024-37081 | 7.8 | Jun 18 | The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may… Affected: 5.x; 4.x |
| CVE-2025-41231 | 7.3 | May 20 | VMware Cloud Foundation Missing Authorisation Vulnerability Affected: 5.x before 5.2.1.2; 4.5.x |
| CVE-2024-22255 | 7.1 | Mar 5 | Information disclosure vulnerability Affected: 5.x; 4.x |
| CVE-2024-37086 | 6.8 | Jun 25 | VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapshot may trigger an… Affected: 5.x; 4.x |
| CVE-2024-22253 | 6.7 | Mar 5 | Use-after-free vulnerability Affected: 5.x; 4.x |
| CVE-2024-22252 | 6.7 | Mar 5 | Use-after-free vulnerability Affected: 5.x; 4.x |
| CVE-2024-37087 | 5.3 | Jun 25 | The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-of-service condition Affected: 5.x; 4.x |
Showing 17