VMware ESXi 8.0 Update 1a

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*

part: o version: 8.0 update: update_1a

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductEsxi (ccebe885-2aec-579d-b811-69cb98e44e56)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-22226 vulnerable 2026-06-08 07:10:52.483386 Details available
HIGH (7.1)
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Published: 2025-03-04T11:56:57.541Z
Updated: 2026-02-26T19:09:47.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22225 vulnerable 2026-06-08 07:10:52.461948 Details available
HIGH (8.2)
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.
Published: 2025-03-04T11:56:27.537Z
Updated: 2026-02-26T19:09:47.409Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22224 vulnerable 2026-06-08 07:10:52.432812 Details available
CRITICAL (9.3)
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Published: 2025-03-04T11:56:12.317Z
Updated: 2026-02-26T19:09:47.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37086 vulnerable 2026-06-08 06:39:46.551079 Details available
MEDIUM (6.8)
VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapshot may trigger an out-of-bounds read leading to a denial-of-service condition of the host.
Published: 2024-06-25T14:16:08.233Z
Updated: 2024-11-12T17:16:57.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37085 vulnerable 2026-06-08 06:39:46.517042 Details available
MEDIUM (6.8)
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.
Published: 2024-06-25T14:16:01.280Z
Updated: 2025-10-21T22:56:21.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22273 vulnerable 2026-06-08 06:29:34.346009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22255 vulnerable 2026-06-08 06:29:34.295829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22254 vulnerable 2026-06-08 06:29:34.292374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22253 vulnerable 2026-06-08 06:29:34.269470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22252 vulnerable 2026-06-08 06:29:34.263845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.