Vsphere Foundation
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:vsphere_foundation:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Vsphere Foundation (fa0cbddb-ea2e-59c6-a0b4-1bf6a35791e5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41250 |
vulnerable | 2026-06-08 07:25:06.819196 |
Header injection vulnerability
HIGH (8.5)
VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate the notification emails sent for scheduled tasks.
Published: 2025-09-29T17:44:27.967Z
Updated: 2026-02-26T17:47:51.328Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41237 |
vulnerable | 2026-06-08 07:25:06.778920 |
VMCI integer-underflow vulnerability
CRITICAL (9.3)
VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI (Virtual Machine Communication Interface) that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
Published: 2025-07-15T18:34:21.083Z
Updated: 2026-02-26T17:50:39.727Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.