Approved changes feed: RSS · Atom
cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Esxi (ccebe885-2aec-579d-b811-69cb98e44e56) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-22273 |
vulnerable | 2026-06-08 06:29:34.337711 |
Details available
HIGH (8.1)
The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.
Published: 2024-05-21T17:29:05.426Z
Updated: 2025-03-26T16:04:29.446Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22253 |
vulnerable | 2026-06-08 06:29:34.266253 |
Use-after-free vulnerability
CRITICAL (9.3)
VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
Published: 2024-03-05T17:57:27.297Z
Updated: 2024-08-16T19:12:32.633Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22252 |
vulnerable | 2026-06-08 06:29:34.225120 |
Use-after-free vulnerability
CRITICAL (9.3)
VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
Published: 2024-03-05T17:57:22.043Z
Updated: 2025-03-27T19:50:25.416Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29552 |
vulnerable | 2026-06-08 06:02:40.519116 |
Details available
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
Published: 2023-04-25T00:00:00.000Z
Updated: 2025-10-21T23:05:48.255Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31681 |
vulnerable | 2026-06-08 05:44:41.201921 |
Details available
VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host.
Published: 2022-10-07T00:00:00.000Z
Updated: 2024-08-03T07:26:01.077Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3999 |
vulnerable | 2026-06-08 05:25:58.646291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5330 |
vulnerable | 2026-06-08 05:07:56.792913 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.