VC
Product
VMware Cloud Foundation
On CISA KEVExploited in the wild
5
CVEs
2
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 1Low 0
Watch
Add VMware Cloud Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-22224 In wildKEV | 8.2 | Mar 4 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability Affected: 5.x, 4.5.x |
| CVE-2025-41244 In wildKEV | 7.8 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) Affected: 5.x before 8.18.5; 4.x before 8.18.5 |
| CVE-2025-22249 | 8.2 | May 13 | VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) Affected: 5.x before 8.18.1 patch 2; 4.x before 8.18.1 patch 2 |
| CVE-2026-22721 | 7.2 | Feb 25 | VMware Aria Operations privilege escalation vulnerability Affected: 4.0 before 5.2.3; 9.0 before 9.0.2 |
| CVE-2025-41245 | 4.9 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) Affected: 5.x before 8.18.5; 4.x before 8.18.5 |
Showing 5