Known vulnerabilities in VMware ESXi ESXi70U3s-24585291

Vendor: VMware, Inc
Software: VMware ESXi
Version: ESXi70U3s-24585291
Software CPE: cpe:2.3:o:vmware:vmware_esxi:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware ESXi version ESXi70U3s-24585291 VMware ESXi ESXi70U3s-24585291 is affected by 7 vulnerabilities: 1 high, 5 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113009 - Missing release of memory after effective lifetime
CVE-2025-41239		 CWE-401 Medium
No
No
 ESXi80U2e-24789317, ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 3 more
#VU113008 - Heap-based Buffer Overflow
CVE-2025-41238		 CWE-122 Medium
No
No
 ESXi80U2e-24789317, ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU113007 - Integer underflow
CVE-2025-41237		 CWE-191 Medium
No
No
 ESXi80U2e-24789317, ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU113006 - Integer overflow
CVE-2025-41236		 CWE-190 High
No
No
 ESXi80U2e-24789317, ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU109487 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-41228		 CWE-79 Low
No
No
 ESXi70U3sv-24723868, ESXi80U3e-24659227 20.05.2025 SB2025052065
SB2025052066
SB2025100354
#VU109486 - Resource exhaustion
CVE-2025-41227		 CWE-400 Medium
No
No
 ESXi70U3sv-24723868, ESXi80U3e-24659227 20.05.2025 SB2025052065
SB2025052067
SB2025052068
and 1 more
#VU109485 - Improper input validation
CVE-2025-41226		 CWE-20 Medium
No
No
 ESXi70U3sv-24723868, ESXi80U3e-24659227 20.05.2025 SB2025052065
SB2025100354