CF
Product
Cloud Foundation
On CISA KEVExploited in the wildRansomware-linked
141
CVEs
21
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 66Medium 50Low 4
Watch
Add Cloud Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59310 RansomwareIn wildKEV | 9.8 | Jul 30 | vCenter directory-traversal vulnerability Affected: 9.1.x.x; 9.0.x.x; 5.x |
| CVE-2024-38813 In wildKEV | 9.8 | Sep 17 | Privilege escalation vulnerability Affected: 4.0 before 5.2 |
| CVE-2024-38812 In wildKEV | 9.8 | Sep 17 | Heap-overflow vulnerability Affected: 4.0 before 5.2 |
| CVE-2024-37079 In wildKEV | 9.8 | Jun 18 | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Affected: 4.0 before 5.2 |
| CVE-2023-34048 In wildKEV | 9.8 | Oct 25 | VMware vCenter Server Out-of-Bounds Write Vulnerability Affected: 4.0 before KB88287; 5.0 before KB88287 |
| CVE-2022-22954 RansomwareIn wildKEV | 9.8 | Apr 11 | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability Affected: 4.0 through 4.3.1 |
| CVE-2021-22005 RansomwareIn wildKEV | 9.8 | Sep 23 | VMware vCenter Server File Upload Vulnerability Affected: 3.0 before 5.0 |
| CVE-2021-21985 RansomwareIn wildKEV | 9.8 | May 26 | VMware vCenter Server Improper Input Validation Vulnerability Affected: 3.0 before 3.10.2.1; 4.0 before 4.2.1 |
| CVE-2021-21972 RansomwareIn wildKEV | 9.8 | Feb 24 | VMware vCenter Server Remote Code Execution Vulnerability Affected: 3.0 before 3.10.1.2; 4.0 before 4.2 |
| CVE-2020-3992 RansomwareIn wildKEV | 9.8 | Oct 20 | VMware ESXi OpenSLP Use-After-Free Vulnerability Affected: 3.0 before 3.10.1.2; 4.0 before 4.1.0.1 |
| CVE-2020-4006 In wildKEV | 9.1 | Nov 23 | Multiple VMware Products Command Injection Vulnerability Affected: 4.0; 4.0.1 |
| CVE-2025-22225 RansomwareIn wildKEV | 8.2 | Mar 4 | VMware ESXi Arbitrary Write Vulnerability Affected: All versions, or not specified |
| CVE-2025-22224 In wildKEV | 8.2 | Mar 4 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability Affected: All versions, or not specified |
| CVE-2026-22719 In wildKEV | 8.1 | Feb 25 | VMware Aria Operations command injection vulnerability Affected: 4.0 before 5.2.3; 9.0 before 9.0.2.0 |
| CVE-2025-41244 In wildKEV | 7.8 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) Affected: 4.0 through 5.2.2 |
| CVE-2022-22960 In wildKEV | 7.8 | Apr 13 | VMware Multiple Products Privilege Escalation Vulnerability Affected: 3.0 before 5.0 |
| CVE-2021-21975 RansomwareIn wildKEV | 7.5 | Mar 31 | VMware Server Side Request Forgery in vRealize Operations Manager API Affected: 3.0; 3.0.1; 3.0.1.1; 3.5; 3.5.1; 3.7; +9 more |
| CVE-2024-37085 RansomwareIn wildKEV | 7.2 | Jun 25 | VMware ESXi Authentication Bypass Vulnerability Affected: 4.0 before 5.2 |
| CVE-2022-22948 In wildKEV | 6.5 | Mar 29 | VMware vCenter Server Incorrect Default File Permissions Vulnerability Affected: 3.0 before 3.11; 4.0 before 4.4.1 |
| CVE-2025-22226 In wildKEV | 6.0 | Mar 4 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2021-21973 In wildKEV | 5.3 | Feb 24 | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability Affected: 3.0 before 3.10.1.2; 4.0 before 4.2 |
| CVE-2026-59309 | 9.8 | Jul 30 | vCenter authentication-bypass vulnerability Affected: 9.1.x.x; 9.0.x.x; 5.x |
| CVE-2023-20864 | 9.8 | Apr 20 | VMware Aria Operations for Logs contains a deserialization vulnerability Affected: 4.0 through 4.5 |
| CVE-2022-22972 | 9.8 | May 20 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users Affected: 3.0; 3.0.1; 3.0.1.1; 3.5; 3.5.1; 3.7; +22 more |
| CVE-2021-22002 | 9.8 | Aug 31 | VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header Affected: 4.0; 4.0.1; 4.1; 4.1.0.1; 4.2.1 |
| CVE-2021-21994 | 9.8 | Jul 13 | SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability Affected: 3.0 before 3.10.2 |
| CVE-2021-21986 | 9.8 | May 26 | The vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the Virtual SAN Health Check, Site Recovery, vSphere Lifecycle Manager, and VMware… Affected: 3.0 before 3.10.2.1; 4.0 before 4.2.1 |
| CVE-2026-47876 | 9.3 | Jul 30 | VMXNET3 out-of-bounds write vulnerability Affected: 9.1.x.x; 9.0.x.x; 5.x |
| CVE-2022-31678 | 9.1 | Oct 28 | VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability Affected: before 3.11 |
| CVE-2026-22720 | 9.0 | Feb 25 | VMware Aria Operations stored cross-site scripting vulnerability Affected: 4.0 before 5.2.3; 9.0 before 9.0.2.0 |
| CVE-2025-22219 | 9.0 | Jan 30 | VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script… Affected: 4.0 through 5.2 |
| CVE-2023-20877 | 8.8 | May 12 | VMware Aria Operations contains a privilege escalation vulnerability Affected: 4.0 through 4.5 |
| CVE-2022-31696 | 8.8 | Dec 13 | VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket Affected: 3.0 before 3.10; 4.0 before 4.3.11; 3.10; 3.11; 4.3.11; 4.4; +3 more |
| CVE-2021-22048 | 8.8 | Nov 10 | The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism Affected: 3.0 through 3.10.2.2; 4.0 through 4.1.0.1 |
| CVE-2021-21974 | 8.8 | Feb 24 | OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability Affected: 3.0 before 3.10.1.2; 4.0 before 4.2 |
| CVE-2023-34063 | 8.3 | Jan 16 | Aria Automation contains a Missing Access Control vulnerability Affected: 4.0; 5.0 |
| CVE-2025-22249 | 8.2 | May 13 | VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of… Affected: 4.0 through 5.2.1 |
| CVE-2024-22254 | 8.2 | Mar 5 | VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the… Affected: 4.0 through 5.0 |
| CVE-2020-4004 | 8.2 | Nov 20 | VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstation (15.x before 15.5.7), Fusion (11.x before 11.5.7)… Affected: 3.0 before 3.10.1.2; 4.0 before 4.1.0.1 |
| CVE-2020-3968 | 8.2 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 3.0 before 3.10; 4.0.0 before 4.0.1 |
| CVE-2020-3962 | 8.2 | Jun 24 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 3.0 before 3.10; 4.0.0 before 4.0.1 |
| CVE-2024-22280 | 8.1 | Jul 11 | VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL… Affected: 4.0 through 5.0 |
| CVE-2026-41723 | 8.0 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 5.0 before 8.18.7; 9.0 before 9.0.2.0; 9.1 |
| CVE-2024-38831 | 7.8 | Nov 26 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can insert malicious commands into the… Affected: 4.0 through 5.2 |
| CVE-2024-38830 | 7.8 | Nov 26 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges may trigger this vulnerability to escalate… Affected: 4.0 through 5.2 |
| CVE-2024-37081 | 7.8 | Jun 18 | The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may… Affected: 4.0 before 5.2 |
| CVE-2024-22273 | 7.8 | May 21 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage… Affected: 4.0 before 5.1.1 |
| CVE-2022-22973 | 7.8 | May 20 | VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability Affected: 4.0; 4.0.1; 4.1; 4.1.0.1; 4.2; 4.2.1; +2 more |
| CVE-2022-22945 | 7.8 | Feb 16 | VMware NSX Edge contains a CLI shell injection vulnerability Affected: 3.0 through 3.11 |
| CVE-2021-22042 | 7.8 | Feb 16 | VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets Affected: 4.0 before 4.4 |