VC
Product
VMware Cloud Foundation
On CISA KEVExploited in the wildRansomware-linked
17
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 6Low 0
Watch
Add VMware Cloud Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-22226 In wildKEV | 6.0 | Mar 4 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Affected: 5.x, 4.5.x |
| CVE-2021-21973 In wildKEV | 5.3 | Feb 24 | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability Affected: 4.x before 4.2; 3.x before 3.10.1.2 |
| CVE-2024-37086 | 6.8 | Jun 25 | VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapshot may trigger an… Affected: 5.x; 4.x |
| CVE-2024-22253 | 6.7 | Mar 5 | Use-after-free vulnerability Affected: 5.x; 4.x |
| CVE-2024-22252 | 6.7 | Mar 5 | Use-after-free vulnerability Affected: 5.x; 4.x |
| CVE-2024-37087 | 5.3 | Jun 25 | The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-of-service condition Affected: 5.x; 4.x |
Showing 6