Known vulnerabilities in VMware ESXi - page 2

Vendor: VMware, Inc
Software: VMware ESXi
Software CPE: cpe:2.3:o:vmware:vmware_esxi:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 94
Public exploits: 4
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware ESXi VMware ESXi is affected by 94 known vulnerabilities: 17 high, 25 medium, 52 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70156 - Out-of-bounds write
CVE-2022-31705		 CWE-787 Medium
Available
No
 ESXi80a-20842819, ESXi70U3si-20841705 13.12.2022 SB2022121332
SB2022121333
SB2022121334
and 3 more
#VU70078 - Heap-based Buffer Overflow
CVE-2022-31699		 CWE-122 Low
No
No
 ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3si-20841705 09.12.2022 SB2022120902
SB2023040649
#VU70077 - Memory corruption
CVE-2022-31696		 CWE-119 Low
No
No
 ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3si-20841705 09.12.2022 SB2022120902
SB2023030226
SB2023040649
and 2 more
#VU67979 - NULL Pointer Dereference
CVE-2022-31681		 CWE-476 Low
No
No
 ESXi650-202210101-SG, ESXi670-202210101-SG, ESXi70U3sf-20036586 07.10.2022 SB2022100706
SB2022112255
SB2023030226
and 1 more
#VU65221 - Processor optimization removal or modification of security-critical code
CVE-2022-28693		 CWE-1037 Low
No
No
 ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 13.07.2022 SB2022071301
SB2022071302
SB2022081126
and 21 more
#VU65220 - Processor optimization removal or modification of security-critical code
CVE-2022-29901		 CWE-1037 Low
No
No
 ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 12.07.2022 SB2022071265
SB2022071302
SB2022071346
and 75 more
#VU65219 - Type confusion
CVE-2022-23816		 CWE-843 Low
No
No
 ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 12.07.2022 SB2022071264
SB2022071302
SB2022071617
and 39 more
#VU65204 - Type confusion
CVE-2022-23825		 CWE-843 Low
No
No
 ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586 12.07.2022 SB2022071249
SB2022071256
SB2022071302
and 39 more
#VU64364 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21123		 CWE-200 Low
No
No
 ESXi670-202206101, ESXi70U3e-19898904 14.06.2022 SB2022061454
SB2022061465
SB2022061463
and 97 more
#VU64365 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21125		 CWE-200 Low
No
No
 ESXi670-202206101, ESXi70U3e-19898904 14.06.2022 SB2022061454
SB2022061467
SB2022061463
and 96 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166		 CWE-200 Low
No
No
 ESXi670-202206101, ESXi70U3e-19898904 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU60620 - Resource Management Errors
CVE-2021-22050		 CWE-399 Medium
No
No
 ESXi650-202110101-SG, ESXi670-202111101-SG, ESXi70U3c-19193900 15.02.2022 SB2022021509
SB2022021512
SB2022092712
and 1 more
#VU60619 - Improper Access Control
CVE-2021-22042		 CWE-284 Low
No
No
 ESXi70U1e-19324898, ESXi70U2e-19290878, ESXi70U3c-19193900 15.02.2022 SB2022021509
SB2022021512
SB2022092712
#VU60618 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-22043		 CWE-367 Low
No
No
 ESXi70U1e-19324898, ESXi70U2e-19290878, ESXi70U3c-19193900 15.02.2022 SB2022021509
SB2022021512
SB2022092712
#VU60617 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-22041		 CWE-362 Medium
No
No
 ESXi650-202202401-SG, ESXi670-202111101-SG, ESXi70U1e-19324898, ESXi70U2e-19290878, ESXi70U3c-19193900 15.02.2022 SB2022021509
SB2022021510
SB2022021512
and 2 more
#VU60616 - Use After Free
CVE-2021-22040		 CWE-416 Medium
No
No
 ESXi650-202202401-SG, ESXi670-202111101-SG, ESXi70U1e-19324898, ESXi70U2e-19290878, ESXi70U3c-19193900 15.02.2022 SB2022021509
SB2022021510
SB2022021512
and 2 more
#VU59182 - Heap-based Buffer Overflow
CVE-2021-22045		 CWE-122 High
No
No
 ESXi650-202110101-SG, ESXi670-202111101-SG, ESXi70U3c-19193900 04.01.2022 SB2022010413
SB2022010414
SB2022010415
and 2 more
#VU54816 - Out-of-bounds read
CVE-2021-21995		 CWE-125 Medium
No
No
 ESXi650-202107401-SG, ESXi670-202103101-SG, ESXi70U2-17630552 13.07.2021 SB2021071366
SB2021071373
SB2021101003
and 2 more
#VU54814 - Improper Authentication
CVE-2021-21994		 CWE-287 High
No
No
 ESXi650-202107401-SG, ESXi670-202103101-SG, ESXi70U2-17630552 13.07.2021 SB2021071366
SB2021071373
SB2021101003
and 3 more
#VU50900 - Heap-based Buffer Overflow
CVE-2021-21974		 CWE-122 High
Available
Exploited
 ESXi650-202102101-SG, ESXi670-202102401-SG, ESXi70U1c-17325551 24.02.2021 SB2021022402
SB2022102127
SB2022102128
and 2 more


Showing elements 21 - 40 out of 94