ES
Virtualization
ESXi
On CISA KEVExploited in the wildRansomware-linked
138
CVEs
8
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 7High 39Medium 37Low 3
Watch
Add ESXi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3992 RansomwareIn wildKEV | 9.8 | Oct 20 | VMware ESXi OpenSLP Use-After-Free Vulnerability Affected: VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) |
| CVE-2019-5544 RansomwareIn wildKEV | 9.8 | Dec 6 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +34 more |
| CVE-2025-22225 RansomwareIn wildKEV | 8.2 | Mar 4 | VMware ESXi Arbitrary Write Vulnerability Affected: 8.0 before ESXi80U3d-24585383; 8.0 before ESXi80U2d-24585300; 7.0 before ESXi70U3s-24585291 |
| CVE-2025-22224 In wildKEV | 8.2 | Mar 4 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability Affected: 8.0 before ESXi80U3d-24585383; 8.0 before ESXi80U2d-24585300; 7.0 before ESXi70U3s-24585291 |
| CVE-2010-3904 In wildKEV | 7.8 | Dec 6 | Linux Kernel Improper Input Validation Vulnerability Affected: 3.5; 4.0; 4.1; 5.0 |
| CVE-2023-29552 In wildKEV | 7.5 | Apr 25 | Service Location Protocol (SLP) Denial-of-Service Vulnerability Affected: before 7.0 |
| CVE-2024-37085 RansomwareIn wildKEV | 7.2 | Jun 25 | VMware ESXi Authentication Bypass Vulnerability Affected: 8.0 before ESXi80U3-24022510; 7.0 |
| CVE-2025-22226 In wildKEV | 6.0 | Mar 4 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Affected: 8.0 before ESXi80U3d-24585383; 8.0 before ESXi80U2d-24585300; 7.0 before ESXi70U3s-24585291 |
| CVE-2012-1516 | 9.9 | May 4 | The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory… Affected: 3.5; 3.5; 4.0; 4.0; 4.0; 4.0; +2 more |
| CVE-2021-21994 | 9.8 | Jul 13 | SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2010-0211 | 9.8 | Jul 28 | The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a… Affected: 4.0; 4.1 |
| CVE-2019-5521 | 9.6 | Sep 20 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2020-3955 | 9.3 | Apr 29 | ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2022-31696 | 8.8 | Dec 13 | VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2021-21974 | 8.8 | Feb 24 | OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2019-5527 | 8.8 | Oct 10 | ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +34 more |
| CVE-2018-6981 | 8.8 | Dec 4 | VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware… Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +34 more |
| CVE-2018-6974 | 8.8 | Oct 16 | VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before… Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +34 more |
| CVE-2017-4941 | 8.8 | Dec 20 | VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow… Affected: 5.5; 5.5; 5.5; 6.0; 6.0; 6.0; +34 more |
| CVE-2017-4933 | 8.8 | Dec 20 | VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +24 more |
| CVE-2017-16544 | 8.8 | Nov 20 | In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not… Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +34 more |
| CVE-2017-4924 | 8.8 | Sep 15 | VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of-bounds write vulnerability in SVGA… Affected: 6.5; 6.5; 6.5; 6.5; 6.5 |
| CVE-2017-4904 | 8.8 | Jun 7 | The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without… Affected: 5.5; 5.5; 5.5; 5.5; 5.5; 6.0; +7 more |
| CVE-2017-4903 | 8.8 | Jun 7 | VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch… Affected: 5.5; 5.5; 5.5; 5.5; 5.5; 6.0; +34 more |
| CVE-2017-4902 | 8.8 | Jun 7 | VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to… Affected: 5.5; 5.5; 5.5; 5.5; 5.5; 6.5; +3 more |
| CVE-2024-22254 | 8.2 | Mar 5 | VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the… Affected: 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +28 more |
| CVE-2022-31705 | 8.2 | Dec 14 | VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI) Affected: 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +13 more |
| CVE-2020-4004 | 8.2 | Nov 20 | VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstation (15.x before 15.5.7), Fusion (11.x before 11.5.7)… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2020-3968 | 8.2 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2020-3962 | 8.2 | Jun 24 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2018-6967 | 8.1 | Jul 9 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader… Affected: 6.7; 6.7 |
| CVE-2018-6966 | 8.1 | Jul 9 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader… Affected: 6.7; 6.7 |
| CVE-2018-6965 | 8.1 | Jul 9 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader… Affected: 6.7; 6.7 |
| CVE-2024-22273 | 7.8 | May 21 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage… Affected: 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +29 more |
| CVE-2021-22042 | 7.8 | Feb 16 | VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets Affected: 7.0; 7.0; 7.0 |
| CVE-2021-22045 | 7.8 | Jan 4 | VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2020-4005 | 7.8 | Nov 20 | VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalation vulnerability that exists in the way… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2020-3969 | 7.8 | Jun 24 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2016-5330 | 7.8 | Aug 8 | Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1,… Affected: 5.0 through 6.0 |
| CVE-2009-2698 | 7.8 | Aug 27 | The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a… Affected: 4.0 |
| CVE-2020-3982 | 7.7 | Oct 20 | VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an… Affected: 7.0.0; 7.0.0; 6.7; 6.7; 6.7; 6.7; +34 more |
| CVE-2021-22050 | 7.5 | Feb 16 | ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy Affected: 6.5; 6.7; 6.7; 6.7; 6.7; 6.7; +34 more |
| CVE-2021-22043 | 7.5 | Feb 16 | VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled Affected: 7.0; 7.0; 7.0 |
| CVE-2021-21995 | 7.5 | Jul 13 | OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2020-3967 | 7.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2020-3966 | 7.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2024-22255 | 7.1 | Mar 5 | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine… Affected: 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +28 more |
| CVE-2024-37086 | 6.8 | Jun 25 | VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapshot may trigger an… Affected: 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +34 more |
| CVE-2019-5517 | 6.8 | Apr 15 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2019-5516 | 6.8 | Apr 15 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |