VC
Product
VMware Cloud Foundation
On CISA KEVExploited in the wildRansomware-linked
17
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 6Low 0
Watch
Add VMware Cloud Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-22225 RansomwareIn wildKEV | 8.2 | Mar 4 | VMware ESXi Arbitrary Write Vulnerability Affected: 5.x, 4.5.x |
| CVE-2024-37085 RansomwareIn wildKEV | 7.2 | Jun 25 | VMware ESXi Authentication Bypass Vulnerability Affected: 5.x; 4.x |
| CVE-2024-22254 | 8.2 | Mar 5 | Out-of-bounds write vulnerability Affected: 5.x; 4.x |
| CVE-2024-37081 | 7.8 | Jun 18 | The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may… Affected: 5.x; 4.x |
| CVE-2025-41231 | 7.3 | May 20 | VMware Cloud Foundation Missing Authorisation Vulnerability Affected: 5.x before 5.2.1.2; 4.5.x |
| CVE-2024-22255 | 7.1 | Mar 5 | Information disclosure vulnerability Affected: 5.x; 4.x |
Showing 6