GCVE - cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*

part: o version: 6.0 update: 2

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Esxi (`ccebe885-2aec-579d-b811-69cb98e44e56`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-5544`	vulnerable	2026-06-08 05:14:07.612521	Details available OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. Published: 2019-12-06T15:54:18.000Z Updated: 2025-10-21T23:35:56.590Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2019-0022.html http://www.openwall.com/lists/oss-security/2019/12/10/2 http://www.openwall.com/lists/oss-security/2019/12/11/2 https://access.redhat.com/errata/RHSA-2019:4240 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPXXJZLPLAQULBCJVI5NNWZ3PGWXGXWG/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5527`	vulnerable	2026-06-08 05:13:59.600694	Details available ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5. Published: 2019-10-10T16:28:46.000Z Updated: 2024-08-04T20:01:50.856Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2019-0014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6982`	vulnerable	2026-06-08 05:11:54.701844	Details available VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may lead to an information leak from host to guest. Published: 2018-12-04T14:00:00.000Z Updated: 2024-08-05T06:17:17.491Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1042055 http://www.securityfocus.com/bid/105882 https://www.vmware.com/security/advisories/VMSA-2018-0027.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6981`	vulnerable	2026-06-08 05:11:54.663910	Details available VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host. Published: 2018-12-04T14:00:00.000Z Updated: 2024-08-05T06:17:17.343Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1042055 http://www.securityfocus.com/bid/105881 https://www.vmware.com/security/advisories/VMSA-2018-0027.html http://www.securitytracker.com/id/1042054	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6974`	vulnerable	2026-06-08 05:11:54.623936	Details available VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host. Published: 2018-10-16T20:00:00.000Z Updated: 2024-09-16T19:46:18.799Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/105660 http://www.securitytracker.com/id/1041876 http://www.securitytracker.com/id/1041875 https://www.vmware.com/security/advisories/VMSA-2018-0026.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6972`	vulnerable	2026-06-08 05:11:54.561934	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4941`	vulnerable	2026-06-08 05:09:38.579819	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4940`	vulnerable	2026-06-08 05:09:38.560597	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4925`	vulnerable	2026-06-08 05:09:38.473788	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4905`	vulnerable	2026-06-08 05:09:38.405378	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4904`	vulnerable	2026-06-08 05:09:38.404529	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4903`	vulnerable	2026-06-08 05:09:38.331201	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-16544`	vulnerable	2026-06-08 05:09:00.488721	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.