CF
Product
Cloud Foundation
by VMware · last CVE Jul 30, 2026
On CISA KEVExploited in the wildRansomware-linked
141
CVEs
21
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 66Medium 50Low 4
Watch

Add Cloud Foundation to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-22225
RansomwareIn wildKEV
8.2
1%
Mar 4
VMware ESXi Arbitrary Write Vulnerability
Affected: All versions, or not specified
CVE-2025-22224
In wildKEV
8.2
2%
Mar 4
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
Affected: All versions, or not specified
CVE-2026-22719
In wildKEV
8.1
18%
Feb 25
VMware Aria Operations command injection vulnerability
Affected: 4.0 before 5.2.3; 9.0 before 9.0.2.0
CVE-2025-41244
In wildKEV
7.8
9%
Sep 29
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
Affected: 4.0 through 5.2.2
CVE-2022-22960
In wildKEV
7.8
36%
Apr 13
VMware Multiple Products Privilege Escalation Vulnerability
Affected: 3.0 before 5.0
CVE-2021-21975
RansomwareIn wildKEV
7.5
78%
Mar 31
VMware Server Side Request Forgery in vRealize Operations Manager API
Affected: 3.0; 3.0.1; 3.0.1.1; 3.5; 3.5.1; 3.7; +9 more
CVE-2024-37085
RansomwareIn wildKEV
7.2
27%
Jun 25
VMware ESXi Authentication Bypass Vulnerability
Affected: 4.0 before 5.2
Showing 7