Vmware Cloud Foundation
Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:vmware_cloud_foundation:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Vmware Cloud Foundation (6699a80f-06eb-5e2f-a03a-917a0be5bb3e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41231 |
vulnerable | 2026-06-08 07:25:06.767943 |
VMware Cloud Foundation Missing Authorisation Vulnerability
HIGH (7.3)
VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perform certain unauthorised actions and access limited sensitive information.
Published: 2025-05-20T12:54:41.570Z
Updated: 2025-05-20T13:21:18.807Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22226 |
vulnerable | 2026-06-08 07:10:52.480376 |
Details available
HIGH (7.1)
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Published: 2025-03-04T11:56:57.541Z
Updated: 2026-02-26T19:09:47.240Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22225 |
vulnerable | 2026-06-08 07:10:52.457038 |
Details available
HIGH (8.2)
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.
Published: 2025-03-04T11:56:27.537Z
Updated: 2026-08-04T03:55:46.011Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38813 |
vulnerable | 2026-06-08 06:41:48.194718 |
Privilege escalation vulnerability
HIGH (7.5)
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.
Published: 2024-09-17T17:13:13.924Z
Updated: 2025-10-21T22:55:44.624Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38812 |
vulnerable | 2026-06-08 06:41:48.154629 |
Heap-overflow vulnerability
CRITICAL (9.8)
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Published: 2024-09-17T17:13:09.778Z
Updated: 2025-10-21T22:55:44.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37087 |
vulnerable | 2026-06-08 06:39:46.554524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37086 |
vulnerable | 2026-06-08 06:39:46.521748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37085 |
vulnerable | 2026-06-08 06:39:46.511696 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37081 |
vulnerable | 2026-06-08 06:39:46.477614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37080 |
vulnerable | 2026-06-08 06:39:46.474213 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37079 |
vulnerable | 2026-06-08 06:39:46.430307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22255 |
vulnerable | 2026-06-08 06:29:34.293648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22254 |
vulnerable | 2026-06-08 06:29:34.287698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22253 |
vulnerable | 2026-06-08 06:29:34.266804 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22252 |
vulnerable | 2026-06-08 06:29:34.230192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22939 |
vulnerable | 2026-06-08 05:40:55.583397 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21974 |
vulnerable | 2026-06-08 05:29:59.226716 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21973 |
vulnerable | 2026-06-08 05:29:59.217755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21972 |
vulnerable | 2026-06-08 05:29:59.186304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.