Known vulnerabilities in VMware ESXi ESXi70U1b-17168206

Vendor: VMware, Inc
Software: VMware ESXi
Version: ESXi70U1b-17168206
Software CPE: cpe:2.3:o:vmware:vmware_esxi:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 29
Public exploits: 2
Known exploited (KEV): 5
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware ESXi version ESXi70U1b-17168206 VMware ESXi ESXi70U1b-17168206 is affected by 29 vulnerabilities: 8 high, 9 medium, 12 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113009 - Missing release of memory after effective lifetime
CVE-2025-41239		 CWE-401 Medium
No
No
 ESXi80U2e-24789317, ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 3 more
#VU113008 - Heap-based Buffer Overflow
CVE-2025-41238		 CWE-122 Medium
No
No
 ESXi80U2e-24789317, ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU113007 - Integer underflow
CVE-2025-41237		 CWE-191 Medium
No
No
 ESXi80U2e-24789317, ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU113006 - Integer overflow
CVE-2025-41236		 CWE-190 High
No
No
 ESXi80U2e-24789317, ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU109487 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-41228		 CWE-79 Low
No
No
 ESXi70U3sv-24723868, ESXi80U3e-24659227 20.05.2025 SB2025052065
SB2025052066
SB2025100354
#VU109486 - Resource exhaustion
CVE-2025-41227		 CWE-400 Medium
No
No
 ESXi70U3sv-24723868, ESXi80U3e-24659227 20.05.2025 SB2025052065
SB2025052067
SB2025052068
and 1 more
#VU109485 - Improper input validation
CVE-2025-41226		 CWE-20 Medium
No
No
 ESXi70U3sv-24723868, ESXi80U3e-24659227 20.05.2025 SB2025052065
SB2025100354
#VU105280 - Out-of-bounds read
CVE-2025-22226		 CWE-125 High
No
Exploited
 ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025030425
SB2025030426
and 3 more
#VU105279 - Permissions, Privileges, and Access Controls
CVE-2025-22225		 CWE-264 High
No
Exploited
 ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025051952
SB2025052027
and 1 more
#VU105278 - Heap-based Buffer Overflow
CVE-2025-22224		 CWE-122 High
No
Exploited
 ESXi80U2d-24585300, ESXi70U3s-24585291, ESXi80U3d-24585383 04.03.2025 SB2025030423
SB2025030425
SB2025051952
and 2 more
#VU96785 - Out-of-bounds write
CVE-2024-22273		 CWE-787 Medium
No
No
 ESXi80U2sb-23305545, ESXi70U3sq-23794019 04.09.2024 SB2024090421
SB2024090423
SB2024102803
#VU93318 - Out-of-bounds read
CVE-2024-37086		 CWE-125 Medium
No
No
 ESXi80U3-24022510, ESXi70U3sq-23794019 25.06.2024 SB20240625122
SB2024082851
SB2024102803
and 1 more
#VU93317 - Improper Authentication
CVE-2024-37085		 CWE-287 High
No
Exploited
 ESXi80U3-24022510 25.06.2024 SB20240625122
SB2024082851
SB2025033127
#VU70156 - Out-of-bounds write
CVE-2022-31705		 CWE-787 Medium
Public exploit available
No
 ESXi80a-20842819, ESXi70U3si-20841705 13.12.2022 SB2022121332
SB2022121333
SB2022121334
and 3 more
#VU70078 - Heap-based Buffer Overflow
CVE-2022-31699		 CWE-122 Low
No
No
 ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3si-20841705 09.12.2022 SB2022120902
SB2023040649
#VU70077 - Memory corruption
CVE-2022-31696		 CWE-119 Low
No
No
 ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3si-20841705 09.12.2022 SB2022120902
SB2023030226
SB2023040649
and 2 more
#VU67979 - NULL Pointer Dereference
CVE-2022-31681		 CWE-476 Low
No
No
 ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3sf-20036586 07.10.2022 SB2022100706
SB2022112255
SB2023030226
and 1 more
#VU65221 - Processor optimization removal or modification of security-critical code
CVE-2022-28693		 CWE-1037 Low
No
No
 ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 13.07.2022 SB2022071301
SB2022071302
SB2022081126
and 21 more
#VU65219 - Type confusion
CVE-2022-23816		 CWE-843 Low
No
No
 ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 12.07.2022 SB2022071264
SB2022071302
SB2022071617
and 39 more
#VU65204 - Type confusion
CVE-2022-23825		 CWE-843 Low
No
No
 ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 12.07.2022 SB2022071249
SB2022071256
SB2022071302
and 39 more


Showing elements 1 - 20 out of 29