Approved changes feed: RSS · Atom

cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*

part: o version: 6.0 update: -

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductEsxi (ccebe885-2aec-579d-b811-69cb98e44e56)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5544 vulnerable 2026-06-08 05:14:07.610499 Details available
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
Published: 2019-12-06T15:54:18.000Z
Updated: 2025-10-21T23:35:56.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5527 vulnerable 2026-06-08 05:13:59.598109 Details available
ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5.
Published: 2019-10-10T16:28:46.000Z
Updated: 2024-08-04T20:01:50.856Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5519 vulnerable 2026-06-08 05:13:59.532150 Details available
VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10.1.6) contain a Time-of-check Time-of-use (TOCTOU) vulnerability in the virtual USB 1.1 UHCI (Universal Host Controller Interface). Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This issue may allow a guest to execute code on the host.
Published: 2019-04-01T20:39:47.000Z
Updated: 2024-08-04T20:01:51.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5518 vulnerable 2026-06-08 05:13:59.528441 Details available
VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10.1.6) contain an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI (Universal Host Controller Interface). Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This issue may allow a guest to execute code on the host.
Published: 2019-04-01T20:39:57.000Z
Updated: 2024-08-04T20:01:51.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6982 vulnerable 2026-06-08 05:11:54.701775 Details available
VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may lead to an information leak from host to guest.
Published: 2018-12-04T14:00:00.000Z
Updated: 2024-08-05T06:17:17.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6981 vulnerable 2026-06-08 05:11:54.663826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6974 vulnerable 2026-06-08 05:11:54.623865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6972 vulnerable 2026-06-08 05:11:54.559659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5753 vulnerable 2026-06-08 05:09:49.619554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4941 vulnerable 2026-06-08 05:09:38.579724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4940 vulnerable 2026-06-08 05:09:38.560527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4925 vulnerable 2026-06-08 05:09:38.473701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4905 vulnerable 2026-06-08 05:09:38.405310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4904 vulnerable 2026-06-08 05:09:38.404460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4903 vulnerable 2026-06-08 05:09:38.328856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16544 vulnerable 2026-06-08 05:09:00.486325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.