ES
Virtualization
ESXi
On CISA KEVExploited in the wildRansomware-linked
138
CVEs
8
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 7High 39Medium 37Low 3
Watch
Add ESXi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3992 RansomwareIn wildKEV | 9.8 | Oct 20 | VMware ESXi OpenSLP Use-After-Free Vulnerability Affected: VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) |
| CVE-2019-5544 RansomwareIn wildKEV | 9.8 | Dec 6 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +34 more |
| CVE-2025-22225 RansomwareIn wildKEV | 8.2 | Mar 4 | VMware ESXi Arbitrary Write Vulnerability Affected: 8.0 before ESXi80U3d-24585383; 8.0 before ESXi80U2d-24585300; 7.0 before ESXi70U3s-24585291 |
| CVE-2025-22224 In wildKEV | 8.2 | Mar 4 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability Affected: 8.0 before ESXi80U3d-24585383; 8.0 before ESXi80U2d-24585300; 7.0 before ESXi70U3s-24585291 |
| CVE-2010-3904 In wildKEV | 7.8 | Dec 6 | Linux Kernel Improper Input Validation Vulnerability Affected: 3.5; 4.0; 4.1; 5.0 |
| CVE-2023-29552 In wildKEV | 7.5 | Apr 25 | Service Location Protocol (SLP) Denial-of-Service Vulnerability Affected: before 7.0 |
| CVE-2024-37085 RansomwareIn wildKEV | 7.2 | Jun 25 | VMware ESXi Authentication Bypass Vulnerability Affected: 8.0 before ESXi80U3-24022510; 7.0 |
| CVE-2025-22226 In wildKEV | 6.0 | Mar 4 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Affected: 8.0 before ESXi80U3d-24585383; 8.0 before ESXi80U2d-24585300; 7.0 before ESXi70U3s-24585291 |
Showing 8