Known vulnerabilities in VMware ESXi ESXi670-201911402

Software: VMware ESXi
Version: ESXi670-201911402
Software CPE: cpe:2.3:o:vmware:vmware_esxi:*:*:*:*:*:*:*:*
Total vulnerabilities: 21
Public exploits: 2
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware ESXi version ESXi670-201911402 VMware ESXi ESXi670-201911402 is affected by 21 vulnerabilities: 9 high, 2 medium, 10 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105280 - Out-of-bounds read
CVE-2025-22226
CWE-125 High
No
Exploited
ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025030425
SB2025030426
and 3 more
#VU105279 - Permissions, Privileges, and Access Controls
CVE-2025-22225
CWE-264 High
No
Exploited
ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025051952
SB2025052027
and 1 more
#VU105278 - Heap-based Buffer Overflow
CVE-2025-22224
CWE-122 High
No
Exploited
ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025030425
SB2025051952
and 2 more
#VU70078 - Heap-based Buffer Overflow
CVE-2022-31699
CWE-122 Low
No
No
ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3si-20841705 09.12.2022 SB2022120902
SB2023040649
#VU70077 - Memory corruption
CVE-2022-31696
CWE-119 Low
No
No
ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3si-20841705 09.12.2022 SB2022120902
SB2023030226
SB2023040649
and 2 more
#VU67979 - NULL Pointer Dereference
CVE-2022-31681
CWE-476 Low
No
No
ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3sf-20036586 07.10.2022 SB2022100706
SB2022112255
SB2023030226
and 1 more
#VU65221 - Processor optimization removal or modification of security-critical code
CVE-2022-28693
CWE-1037 Low
No
No
ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 13.07.2022 SB2022071301
SB2022071302
SB2022081126
and 21 more
#VU65220 - Processor optimization removal or modification of security-critical code
CVE-2022-29901
CWE-1037 Low
No
No
ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 12.07.2022 SB2022071265
SB2022071302
SB2022071346
and 75 more
#VU65219 - Type confusion
CVE-2022-23816
CWE-843 Low
No
No
ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 12.07.2022 SB2022071264
SB2022071302
SB2022071617
and 39 more
#VU65204 - Type confusion
CVE-2022-23825
CWE-843 Low
No
No
ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 12.07.2022 SB2022071249
SB2022071256
SB2022071302
and 39 more
#VU64364 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21123
CWE-200 Low
No
No
ESXi670-202206101, ESXi70U3e-19898904 14.06.2022 SB2022061454
SB2022061465
SB2022061463
and 97 more
#VU64365 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21125
CWE-200 Low
No
No
ESXi670-202206101, ESXi70U3e-19898904 14.06.2022 SB2022061454
SB2022061467
SB2022061463
and 96 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166
CWE-200 Low
No
No
ESXi670-202206101, ESXi70U3e-19898904 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU59182 - Heap-based Buffer Overflow
CVE-2021-22045
CWE-122 High
No
No
ESXi650-202110101-SG, ESXi670-202111101-SG, ESXi70U3c-19193900 04.01.2022 SB2022010413
SB2022010414
SB2022010415
and 2 more
#VU54816 - Out-of-bounds read
CVE-2021-21995
CWE-125 Medium
No
No
ESXi650-202107401-SG, ESXi670-202103101-SG, ESXi70U2-17630552 13.07.2021 SB2021071366
SB2021071373
SB2021101003
and 2 more
#VU54814 - Improper Authentication
CVE-2021-21994
CWE-287 High
No
No
ESXi650-202107401-SG, ESXi670-202103101-SG, ESXi70U2-17630552 13.07.2021 SB2021071366
SB2021071373
SB2021101003
and 3 more
#VU50900 - Heap-based Buffer Overflow
CVE-2021-21974
CWE-122 High
Public exploit available
Exploited
ESXi650-202102101-SG, ESXi670-202102401-SG, ESXi70U1c-17325551 24.02.2021 SB2021022402
SB2022102127
SB2022102128
and 2 more
#VU47751 - Missing release of memory after effective lifetime
CVE-2020-3995
CWE-401 High
No
No
ESXi650-202007101-SG, ESXi670-202008101-SG 20.10.2020 SB2020102044
SB2020102046
SB2022102526
#VU47750 - Use After Free
CVE-2020-3992
CWE-416 High
Public exploit available
Exploited
ESXi_7.0.1-0.0.16850804, ESXi650-202007101-SG, ESXi670-202008101-SG 20.10.2020 SB2020102044
SB2022102526
#VU47749 - Out-of-bounds write
CVE-2020-3982
CWE-787 High
No
No
ESXi_7.0.1-0.0.16850804, ESXi650-202007101-SG, ESXi670-202008101-SG 20.10.2020 SB2020102044
SB2020102047
SB2020102048
and 1 more


Showing elements 1 - 20 out of 21