Vmware Esxi
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:vmware_esxi:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Vmware Esxi (7c9cea2a-4172-5a3d-abb5-3a9c11c6c4a2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-22254 |
vulnerable | 2026-06-08 06:29:34.286716 |
Out-of-bounds write vulnerability
HIGH (7.9)
VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.
Published: 2024-03-05T17:58:24.341Z
Updated: 2024-08-14T18:53:20.387Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3971 |
vulnerable | 2026-06-08 05:25:58.274188 |
Details available
VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow vulnerability in the vmxnet3 virtual network adapter. A malicious actor with local access to a virtual machine with a vmxnet3 network adapter present may be able to read privileged information contained in physical memory.
Published: 2020-06-25T14:55:33.000Z
Updated: 2024-08-04T07:52:20.541Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3970 |
vulnerable | 2026-06-08 05:25:58.267834 |
Details available
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in the Shader functionality. A malicious actor with non-administrative local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to crash the virtual machine's vmx process leading to a partial denial of service condition.
Published: 2020-06-25T14:37:44.000Z
Updated: 2024-08-04T07:52:20.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3969 |
vulnerable | 2026-06-08 05:25:58.259199 |
Details available
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an off-by-one heap-overflow vulnerability in the SVGA device. A malicious actor with local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible.
Published: 2020-06-24T16:00:46.000Z
Updated: 2024-08-04T07:52:20.611Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3968 |
vulnerable | 2026-06-08 05:25:58.253267 |
Details available
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds write vulnerability in the USB 3.0 controller (xHCI). A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to crash the virtual machine's vmx process leading to a denial of service condition or execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible.
Published: 2020-06-25T14:43:59.000Z
Updated: 2024-08-04T07:52:20.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3967 |
vulnerable | 2026-06-08 05:25:58.247521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3966 |
vulnerable | 2026-06-08 05:25:58.241829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3965 |
vulnerable | 2026-06-08 05:25:58.235300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3964 |
vulnerable | 2026-06-08 05:25:58.228071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3963 |
vulnerable | 2026-06-08 05:25:58.201359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3962 |
vulnerable | 2026-06-08 05:25:58.178906 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3959 |
vulnerable | 2026-06-08 05:25:58.137765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3958 |
vulnerable | 2026-06-08 05:25:58.096402 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5521 |
vulnerable | 2026-06-08 05:13:59.562121 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6982 |
vulnerable | 2026-06-08 05:11:54.701620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.