Known vulnerabilities in VMware ESXi ESXi670-202111001

Software: VMware ESXi
Version: ESXi670-202111001
Software CPE: cpe:2.3:o:vmware:vmware_esxi:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 3
Highest CVSSv4 Score: 7.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware ESXi version ESXi670-202111001 VMware ESXi ESXi670-202111001 is affected by 13 vulnerabilities: 3 high, 10 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105280 - Out-of-bounds read
CVE-2025-22226
CWE-125 High
No
Exploited
ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025030425
SB2025030426
and 3 more
#VU105279 - Permissions, Privileges, and Access Controls
CVE-2025-22225
CWE-264 High
No
Exploited
ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025051952
SB2025052027
and 1 more
#VU105278 - Heap-based Buffer Overflow
CVE-2025-22224
CWE-122 High
No
Exploited
ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025030425
SB2025051952
and 2 more
#VU70078 - Heap-based Buffer Overflow
CVE-2022-31699
CWE-122 Low
No
No
ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3si-20841705 09.12.2022 SB2022120902
SB2023040649
#VU70077 - Memory corruption
CVE-2022-31696
CWE-119 Low
No
No
ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3si-20841705 09.12.2022 SB2022120902
SB2023030226
SB2023040649
and 2 more
#VU67979 - NULL Pointer Dereference
CVE-2022-31681
CWE-476 Low
No
No
ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3sf-20036586 07.10.2022 SB2022100706
SB2022112255
SB2023030226
and 1 more
#VU65221 - Processor optimization removal or modification of security-critical code
CVE-2022-28693
CWE-1037 Low
No
No
ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 13.07.2022 SB2022071301
SB2022071302
SB2022081126
and 21 more
#VU65220 - Processor optimization removal or modification of security-critical code
CVE-2022-29901
CWE-1037 Low
No
No
ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 12.07.2022 SB2022071265
SB2022071302
SB2022071346
and 75 more
#VU65219 - Type confusion
CVE-2022-23816
CWE-843 Low
No
No
ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 12.07.2022 SB2022071264
SB2022071302
SB2022071617
and 39 more
#VU65204 - Type confusion
CVE-2022-23825
CWE-843 Low
No
No
ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 12.07.2022 SB2022071249
SB2022071256
SB2022071302
and 39 more
#VU64364 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21123
CWE-200 Low
No
No
ESXi670-202206101, ESXi70U3e-19898904 14.06.2022 SB2022061454
SB2022061465
SB2022061463
and 97 more
#VU64365 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21125
CWE-200 Low
No
No
ESXi670-202206101, ESXi70U3e-19898904 14.06.2022 SB2022061454
SB2022061467
SB2022061463
and 96 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166
CWE-200 Low
No
No
ESXi670-202206101, ESXi70U3e-19898904 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more