ES
Product
ESX
87
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 8Low 1
Watch
Add ESX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-1516 | 9.9 | May 4 | The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory… Affected: 3.5; 3.5; 3.5; 3.5; 4.0; 4.1 |
| CVE-2026-47876 | 9.3 | Jul 30 | VMXNET3 out-of-bounds write vulnerability Affected: 9.1.x.x before ESXi-9.1.0.0200-25557999; 9.0.x.x before ESXi-9.0.2.0100-25595025; 8.0 before ESXi80U3k-25595708 |
| CVE-2010-2943 | 8.1 | Sep 30 | The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read… Affected: 4.0; 4.1 |
| CVE-2010-3081 | 7.8 | Sep 24 | The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory… Affected: 4.0; 4.1 |
| CVE-2010-2798 | 7.8 | Sep 8 | The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries,… Affected: 4.0; 4.1 |
| CVE-2010-2524 | 7.8 | Sep 8 | The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the… Affected: 4.0; 4.1 |
| CVE-2010-2492 | 7.8 | Sep 8 | Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or… Affected: 4.0; 4.1 |
| CVE-2009-0034 | 7.8 | Jan 30 | parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that… Affected: 4.0 |
| CVE-2026-41703 | 7.6 | Jul 30 | Out-of-bounds read vulnerability Affected: 9.1.x.x before ESXi-9.1.0.0-25370933; 9.0.x.x before ESXi-9.0.2.0100-25595025; 8.0 before ESXi80U3i-25205845 |
| CVE-2010-4251 | 7.5 | May 26 | The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly manage a backlog of received packets, which allows remote attackers to cause a… Affected: 4.0; 4.1 |
| CVE-2009-3547 | 7.0 | Nov 4 | Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain… Affected: 4.0 |
| CVE-2009-2416 | 6.5 | Aug 11 | Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service… Affected: 3.0.3; 3.5; 4.0 |
| CVE-2008-3281 | 6.5 | Aug 27 | libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service… Affected: 2.5.4; 2.5.5; 3.0.2; 3.0.3 |
| CVE-2010-4655 | 5.5 | Jul 18 | net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel… Affected: 4.0; 4.1 |
| CVE-2010-4343 | 5.5 | Dec 29 | drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of service (system… Affected: 4.0; 4.1 |
| CVE-2010-3078 | 5.5 | Sep 21 | The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to… Affected: 4.0; 4.1 |
| CVE-2010-2942 | 5.5 | Sep 21 | The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump… Affected: 4.0; 4.1 |
| CVE-2010-2066 | 5.5 | Sep 8 | The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that… Affected: 4.0; 4.1 |
| CVE-2009-3621 | 5.5 | Oct 22 | net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening… Affected: 4.0 |
| CVE-2026-41709 | 2.7 | Jul 30 | ESX insufficient logging vulnerability Affected: 9.1.x.x before ESXi-9.1.0.0-25370933; 9.0.x.x before ESXi-9.0.2.0100-25595025; 8.0 before ESXi80U3j-25429389 |
| CVE-2014-1208 | – | Jan 17 | VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users… Affected: 4.0; 4.1 |
| CVE-2014-1207 | – | Jan 17 | VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepting and modifying Network File Copy… Affected: 4.0; 4.1 |
| CVE-2013-5973 | – | Dec 23 | VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Administrator… Affected: 4.0; 4.1 |
| CVE-2013-3519 | – | Dec 4 | lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when… Affected: 4.0; 4.1 |
| CVE-2013-5970 | – | Oct 21 | hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to cause a denial of service (hostd-vmdb service outage) by modifying management traffic Affected: 4.0; 4.1 |
| CVE-2013-3658 | – | Sep 10 | Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete arbitrary host OS files via unspecified vectors Affected: 4.0; 4.1 |
| CVE-2013-3657 | – | Sep 10 | Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors Affected: 4.0; 4.1 |
| CVE-2013-1661 | – | Sep 4 | VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to cause a denial of… Affected: 4.0; 4.1 |
| CVE-2013-1405 | – | Feb 15 | VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware… Affected: 3.5; 3.5; 3.5; 3.5; 4.0; 4.1 |
| CVE-2013-1406 | – | Feb 11 | The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before… Affected: 4.0; 4.1 |
| CVE-2012-5703 | – | Nov 20 | The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (2)… Affected: 4.1 |
| CVE-2012-1666 | – | Sep 8 | Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware… Affected: 4.1; 5.0 |
| CVE-2012-3289 | – | Jun 14 | VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of… Affected: 3.5; 3.5; 3.5; 3.5; 4.0; 4.1 |
| CVE-2012-3288 | – | Jun 14 | VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and… Affected: 3.5; 3.5; 3.5; 3.5; 4.0; 4.1 |
| CVE-2012-2450 | – | May 4 | VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly… Affected: 3.5; 3.5; 3.5; 3.5; 4.0; 4.1 |
| CVE-2012-2449 | – | May 4 | VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly… Affected: 3.5; 3.5; 3.5; 3.5; 4.0; 4.1 |
| CVE-2012-2448 | – | May 4 | VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via NFS traffic Affected: 3.5; 3.5; 3.5; 3.5; 4.0; 4.1 |
| CVE-2012-1517 | – | May 4 | The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash)… Affected: 4.1 |
| CVE-2012-1518 | – | Apr 17 | VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect… Affected: 3.5; 3.5; 3.5; 3.5; 4.0; 4.1 |
| CVE-2012-1515 | – | Apr 2 | VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain guest OS privileges by overwriting… Affected: 3.5; 4.0; 4.1 |
| CVE-2012-1510 | – | Mar 16 | Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges… Affected: 4.0; 4.1 |
| CVE-2012-1508 | – | Mar 16 | The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial… Affected: 4.0; 4.1 |
| CVE-2011-2146 | – | Jun 6 | mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi… Affected: 3.0.3; 3.5; 4.0; 4.1 |
| CVE-2011-2145 | – | Jun 6 | mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi… Affected: 3.0.3; 3.5; 4.0; 4.1 |
| CVE-2011-1787 | – | Jun 6 | Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before… Affected: 3.0.3; 3.5; 4.0; 4.1 |
| CVE-2011-1789 | – | May 9 | The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and… Affected: 4.0; 4.1 |
| CVE-2011-1785 | – | May 3 | VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic Affected: 4.0; 4.1 |
| CVE-2011-1786 | – | May 3 | lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and… Affected: 4.1 |
| CVE-2010-3609 | – | Mar 11 | The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1… Affected: 4.0; 4.1 |
| CVE-2011-0355 | – | Feb 17 | Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets,… Affected: 4.0; 4.1 |