InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product vmware:esxi. Show all products

11 CVEs, showing 1 to 11
CVESeverityTitlePublished
CVE-2025-22226
Known exploited
High 7.1VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS.
Assigned by vmware
Mar 4, 2025
CVE-2025-22225
Known exploited
High 8.2VMware ESXi contains an arbitrary write vulnerability.
Assigned by vmware
Mar 4, 2025
CVE-2025-22224
Known exploited
Critical 9.3VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.
Assigned by vmware
Mar 4, 2025
CVE-2024-37085
Known exploited
Medium 6.8VMware ESXi contains an authentication bypass vulnerability.
Assigned by vmware
Jun 25, 2024
CVE-2023-29552
Known exploited
High 7.5The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services.
Assigned by mitre
Apr 25, 2023
CVE-2022-21166Medium 5.5Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Assigned by intel
Jun 15, 2022
CVE-2022-21125Medium 5.5Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Assigned by intel
Jun 15, 2022
CVE-2022-21123Medium 5.5Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Assigned by intel
Jun 15, 2022
CVE-2020-3992
Known exploited
Critical 9.8OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue.
Assigned by vmware
Oct 20, 2020
CVE-2019-5544
Known exploited
Critical 9.8OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue.
Assigned by vmware
Dec 6, 2019
CVE-2010-3904
Known exploited
High 7.8The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from u…
Assigned by canonical
Dec 6, 2010

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.