Known vulnerabilities in VMware ESXi 8.0

Vendor: Broadcom
Software: VMware ESXi
Version: 8.0
Software CPE: cpe:2.3:o:broadcom:vmware_esxi:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 4
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware ESXi version 8.0 VMware ESXi 8.0 is affected by 6 vulnerabilities: 4 high, 2 medium Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105280 - Out-of-bounds read
CVE-2025-22226		 CWE-125 High
No
Exploited
 ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025030425
SB2025030426
and 3 more
#VU105279 - Permissions, Privileges, and Access Controls
CVE-2025-22225		 CWE-264 High
No
Exploited
 ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025051952
SB2025052027
and 1 more
#VU105278 - Heap-based Buffer Overflow
CVE-2025-22224		 CWE-122 High
No
Exploited
 ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025030425
SB2025051952
and 2 more
#VU93318 - Out-of-bounds read
CVE-2024-37086		 CWE-125 Medium
No
No
 ESXi80U3-24022510, ESXi70U3sq-23794019 25.06.2024 SB20240625122
SB2024082851
SB2024102803
and 1 more
#VU93317 - Improper Authentication
CVE-2024-37085		 CWE-287 High
No
Exploited
 ESXi80U3-24022510 25.06.2024 SB20240625122
SB2024082851
SB2025033127
#VU70156 - Out-of-bounds write
CVE-2022-31705		 CWE-787 Medium
Public exploit available
No
 ESXi80a-20842819, ESXi70U3si-20841705 13.12.2022 SB2022121332
SB2022121333
SB2022121334
and 3 more