VMware ESXi 8.0c

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*

part: o version: 8.0 update: c

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductEsxi (ccebe885-2aec-579d-b811-69cb98e44e56)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-22226 vulnerable 2026-06-08 07:10:52.483338 Details available
HIGH (7.1)
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Published: 2025-03-04T11:56:57.541Z
Updated: 2026-02-26T19:09:47.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22225 vulnerable 2026-06-08 07:10:52.461796 Details available
HIGH (8.2)
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.
Published: 2025-03-04T11:56:27.537Z
Updated: 2026-02-26T19:09:47.409Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22224 vulnerable 2026-06-08 07:10:52.431102 Details available
CRITICAL (9.3)
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Published: 2025-03-04T11:56:12.317Z
Updated: 2026-02-26T19:09:47.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37086 vulnerable 2026-06-08 06:39:46.548564 Details available
MEDIUM (6.8)
VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapshot may trigger an out-of-bounds read leading to a denial-of-service condition of the host.
Published: 2024-06-25T14:16:08.233Z
Updated: 2024-11-12T17:16:57.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37085 vulnerable 2026-06-08 06:39:46.515889 Details available
MEDIUM (6.8)
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.
Published: 2024-06-25T14:16:01.280Z
Updated: 2025-10-21T22:56:21.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22273 vulnerable 2026-06-08 06:29:34.345893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22255 vulnerable 2026-06-08 06:29:34.295571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22254 vulnerable 2026-06-08 06:29:34.292144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22253 vulnerable 2026-06-08 06:29:34.269329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22252 vulnerable 2026-06-08 06:29:34.261803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.