Known vulnerabilities in VMware ESXi - page 3

Vendor: VMware, Inc
Software: VMware ESXi
Software CPE: cpe:2.3:o:vmware:vmware_esxi:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 94
Public exploits: 4
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware ESXi VMware ESXi is affected by 94 known vulnerabilities: 17 high, 25 medium, 52 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49098 - NULL Pointer Dereference
CVE-2020-3999		 CWE-476 Low
No
No
 ESXi70U1c-17325551 21.12.2020 SB2020122118
#VU48602 - Use After Free
CVE-2020-4004		 CWE-416 Low
No
No
 ESXi650-202011301-SG, ESXi670-202011101-SG, ESXi70U1b-17168206 20.11.2020 SB2020112322
SB2022102414
SB2022102526
#VU48603 - Permissions, Privileges, and Access Controls
CVE-2020-4005		 CWE-264 Low
No
No
 ESXi650-202011301-SG, ESXi670-202011101-SG, ESXi70U1b-17168206 20.11.2020 SB2020112322
SB2022102414
SB2022102526
#VU47751 - Missing release of memory after effective lifetime
CVE-2020-3995		 CWE-401 High
No
No
 ESXi650-202007101-SG, ESXi670-202008101-SG 20.10.2020 SB2020102044
SB2020102046
SB2022102526
#VU47750 - Use After Free
CVE-2020-3992		 CWE-416 High
Available
Exploited
 ESXi_7.0.1-0.0.16850804, ESXi650-202007101-SG, ESXi670-202008101-SG 20.10.2020 SB2020102044
SB2022102526
#VU47749 - Out-of-bounds write
CVE-2020-3982		 CWE-787 High
No
No
 ESXi_7.0.1-0.0.16850804, ESXi650-202007101-SG, ESXi670-202008101-SG 20.10.2020 SB2020102044
SB2020102047
SB2020102048
and 1 more
#VU47748 - Out-of-bounds read
CVE-2020-3981		 CWE-125 Medium
No
No
 ESXi_7.0.1-0.0.16850804, ESXi650-202007101-SG, ESXi670-202008101-SG 20.10.2020 SB2020102044
SB2020102047
SB2020102048
and 1 more
#VU29303 - Heap-based Buffer Overflow
CVE-2020-3971		 CWE-122 Low
No
No
 ESXi650-201907101-SG, ESXi670-201904101-SG 25.06.2020 SB2020062517
#VU29302 - Use After Free
CVE-2020-3963		 CWE-416 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202006401-SG 25.06.2020 SB2020062518
SB2022102714
#VU29301 - Out-of-bounds read
CVE-2020-3964		 CWE-125 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202006401-SG 25.06.2020 SB2020062518
SB2022102714
#VU29300 - Out-of-bounds read
CVE-2020-3965		 CWE-125 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202006401-SG 25.06.2020 SB2020062518
SB2022102714
#VU29299 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3966		 CWE-362 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202004101-SG 25.06.2020 SB2020062519
SB2022102630
SB2022102714
#VU29298 - Heap-based Buffer Overflow
CVE-2020-3967		 CWE-122 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202004101-SG 25.06.2020 SB2020062520
SB2022102630
SB2022102714
#VU29297 - Out-of-bounds write
CVE-2020-3968		 CWE-787 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202004101-SG 25.06.2020 SB2020062520
SB2022102630
SB2022102714
#VU29296 - Out-of-bounds read
CVE-2020-3970		 CWE-125 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202004101-SG 25.06.2020 SB2020062520
SB2022102630
#VU29295 - Off-by-one Error
CVE-2020-3969		 CWE-193 Low
No
No
 ESXi_7.0.0-1.20.16321839 25.06.2020 SB2020062520
SB2022102630
#VU29294 - Use After Free
CVE-2020-3962		 CWE-416 Low
No
No
 ESXi_7.0.0-1.20.16321839, ESXi650-202005401-SG, ESXi670-202004101-SG 25.06.2020 SB2020062520
SB2022102630
#VU28991 - Out-of-bounds read
CVE-2020-3960		 CWE-125 Low
No
No
 ESXi650-202005401-SG, ESXi670-202006401-SG 12.06.2020 SB2020061201
SB2022102714
#VU28340 - Reachable Assertion
CVE-2020-3958		 CWE-617 Medium
No
No
 ESXi650-202005401-SG, ESXi670-202004101-SG 29.05.2020 SB2020052907
#VU28339 - Missing release of memory after effective lifetime
CVE-2020-3959		 CWE-401 Low
No
No
 ESXi650-202005401-SG, ESXi670-202004101-SG 29.05.2020 SB2020052906
SB2022102714


Showing elements 41 - 60 out of 94