Known vulnerabilities in VMware ESXi 7.0

Vendor: Broadcom
Software: VMware ESXi
Version: 7.0
Software CPE: cpe:2.3:o:broadcom:vmware_esxi:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 23
Public exploits: 2
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware ESXi version 7.0 VMware ESXi 7.0 is affected by 23 vulnerabilities: 8 high, 3 medium, 12 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105280 - Out-of-bounds read
CVE-2025-22226		 CWE-125 High
No
Exploited
 ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025030425
SB2025030426
and 3 more
#VU105279 - Permissions, Privileges, and Access Controls
CVE-2025-22225		 CWE-264 High
No
Exploited
 ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025051952
SB2025052027
and 1 more
#VU105278 - Heap-based Buffer Overflow
CVE-2025-22224		 CWE-122 High
No
Exploited
 ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025030425
SB2025051952
and 2 more
#VU93318 - Out-of-bounds read
CVE-2024-37086		 CWE-125 Medium
No
No
 ESXi80U3-24022510, ESXi70U3sq-23794019 25.06.2024 SB20240625122
SB2024082851
SB2024102803
and 1 more
#VU93317 - Improper Authentication
CVE-2024-37085		 CWE-287 High
No
Exploited
 ESXi80U3-24022510 25.06.2024 SB20240625122
SB2024082851
SB2025033127
#VU54816 - Out-of-bounds read
CVE-2021-21995		 CWE-125 Medium
No
No
 ESXi650-202107401-SG, ESXi670-202103101-SG, ESXi70U2-17630552 13.07.2021 SB2021071366
SB2021071373
SB2021101003
and 2 more
#VU54814 - Improper Authentication
CVE-2021-21994		 CWE-287 High
No
No
 ESXi650-202107401-SG, ESXi670-202103101-SG, ESXi70U2-17630552 13.07.2021 SB2021071366
SB2021071373
SB2021101003
and 3 more
#VU50900 - Heap-based Buffer Overflow
CVE-2021-21974		 CWE-122 High
Public exploit available
Exploited
 ESXi650-202102101-SG, ESXi670-202102401-SG, ESXi70U1c-17325551 24.02.2021 SB2021022402
SB2022102127
SB2022102128
and 2 more
#VU49098 - NULL Pointer Dereference
CVE-2020-3999		 CWE-476 Low
No
No
 ESXi70U1c-17325551 21.12.2020 SB2020122118
#VU48602 - Use After Free
CVE-2020-4004		 CWE-416 Low
No
No
 ESXi650-202011301-SG, ESXi670-202011101-SG, ESXi70U1b-17168206 20.11.2020 SB2020112322
SB2022102414
SB2022102526
#VU48603 - Permissions, Privileges, and Access Controls
CVE-2020-4005		 CWE-264 Low
No
No
 ESXi650-202011301-SG, ESXi670-202011101-SG, ESXi70U1b-17168206 20.11.2020 SB2020112322
SB2022102414
SB2022102526
#VU47750 - Use After Free
CVE-2020-3992		 CWE-416 High
Public exploit available
Exploited
 ESXi_7.0.1-0.0.16850804, ESXi650-202007101-SG, ESXi670-202008101-SG 20.10.2020 SB2020102044
SB2022102526
#VU47749 - Out-of-bounds write
CVE-2020-3982		 CWE-787 High
No
No
 ESXi_7.0.1-0.0.16850804, ESXi650-202007101-SG, ESXi670-202008101-SG 20.10.2020 SB2020102044
SB2020102047
SB2020102048
and 1 more
#VU47748 - Out-of-bounds read
CVE-2020-3981		 CWE-125 Medium
No
No
 ESXi_7.0.1-0.0.16850804, ESXi650-202007101-SG, ESXi670-202008101-SG 20.10.2020 SB2020102044
SB2020102047
SB2020102048
and 1 more
#VU29299 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3966		 CWE-362 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202004101-SG 25.06.2020 SB2020062519
SB2022102630
SB2022102714
#VU29298 - Heap-based Buffer Overflow
CVE-2020-3967		 CWE-122 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202004101-SG 25.06.2020 SB2020062520
SB2022102630
SB2022102714
#VU29297 - Out-of-bounds write
CVE-2020-3968		 CWE-787 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202004101-SG 25.06.2020 SB2020062520
SB2022102630
SB2022102714
#VU29296 - Out-of-bounds read
CVE-2020-3970		 CWE-125 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202004101-SG 25.06.2020 SB2020062520
SB2022102630
#VU29295 - Off-by-one Error
CVE-2020-3969		 CWE-193 Low
No
No
 ESXi_7.0.0-1.20.16321839 25.06.2020 SB2020062520
SB2022102630
#VU29294 - Use After Free
CVE-2020-3962		 CWE-416 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202004101-SG 25.06.2020 SB2020062520
SB2022102630


Showing elements 1 - 20 out of 23