Login Request a demo
CF
Product
Cloud Foundation
by VMware · last CVE Jul 30, 2026
On CISA KEVExploited in the wildRansomware-linked
141
CVEs
21
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities141In the news12Timeline
Severity mix
Critical 21High 66Medium 50Low 4
Severity
All severities141Critical21High66Medium50Low4
Exploitation
On CISA KEV21Exploited in the wild21
Watch

Add Cloud Foundation to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-59310
RansomwareIn wildKEV
9.8
3%
Jul 30
vCenter directory-traversal vulnerability
Affected: 9.1.x.x; 9.0.x.x; 5.x
CVE-2024-38813
In wildKEV
9.8
17%
Sep 17
Privilege escalation vulnerability
Affected: 4.0 before 5.2
CVE-2024-38812
In wildKEV
9.8
55%
Sep 17
Heap-overflow vulnerability
Affected: 4.0 before 5.2
CVE-2024-37079
In wildKEV
9.8
22%
Jun 18
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
Affected: 4.0 before 5.2
CVE-2023-34048
In wildKEV
9.8
99%
Oct 25
VMware vCenter Server Out-of-Bounds Write Vulnerability
Affected: 4.0 before KB88287; 5.0 before KB88287
CVE-2022-22954
RansomwareIn wildKEV
9.8
100%
Apr 11
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
Affected: 4.0 through 4.3.1
CVE-2021-22005
RansomwareIn wildKEV
9.8
100%
Sep 23
VMware vCenter Server File Upload Vulnerability
Affected: 3.0 before 5.0
CVE-2021-21985
RansomwareIn wildKEV
9.8
100%
May 26
VMware vCenter Server Improper Input Validation Vulnerability
Affected: 3.0 before 3.10.2.1; 4.0 before 4.2.1
CVE-2021-21972
RansomwareIn wildKEV
9.8
100%
Feb 24
VMware vCenter Server Remote Code Execution Vulnerability
Affected: 3.0 before 3.10.1.2; 4.0 before 4.2
CVE-2020-3992
RansomwareIn wildKEV
9.8
83%
Oct 20
VMware ESXi OpenSLP Use-After-Free Vulnerability
Affected: 3.0 before 3.10.1.2; 4.0 before 4.1.0.1
CVE-2020-4006
In wildKEV
9.1
17%
Nov 23
Multiple VMware Products Command Injection Vulnerability
Affected: 4.0; 4.0.1
CVE-2025-22225
RansomwareIn wildKEV
8.2
1%
Mar 4
VMware ESXi Arbitrary Write Vulnerability
Affected: All versions, or not specified
CVE-2025-22224
In wildKEV
8.2
2%
Mar 4
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
Affected: All versions, or not specified
CVE-2026-22719
In wildKEV
8.1
18%
Feb 25
VMware Aria Operations command injection vulnerability
Affected: 4.0 before 5.2.3; 9.0 before 9.0.2.0
CVE-2025-41244
In wildKEV
7.8
9%
Sep 29
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
Affected: 4.0 through 5.2.2
CVE-2022-22960
In wildKEV
7.8
36%
Apr 13
VMware Multiple Products Privilege Escalation Vulnerability
Affected: 3.0 before 5.0
CVE-2021-21975
RansomwareIn wildKEV
7.5
78%
Mar 31
VMware Server Side Request Forgery in vRealize Operations Manager API
Affected: 3.0; 3.0.1; 3.0.1.1; 3.5; 3.5.1; 3.7; +9 more
CVE-2024-37085
RansomwareIn wildKEV
7.2
27%
Jun 25
VMware ESXi Authentication Bypass Vulnerability
Affected: 4.0 before 5.2
CVE-2022-22948
In wildKEV
6.5
13%
Mar 29
VMware vCenter Server Incorrect Default File Permissions Vulnerability
Affected: 3.0 before 3.11; 4.0 before 4.4.1
CVE-2025-22226
In wildKEV
6.0
2%
Mar 4
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2021-21973
In wildKEV
5.3
88%
Feb 24
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
Affected: 3.0 before 3.10.1.2; 4.0 before 4.2
Showing 21