VMware ESXi 7.0.0 b
Approved changes feed: RSS · Atom
cpe:2.3:o:vmware:esxi:7.0.0:b:*:*:*:*:*:*
part: o version: 7.0.0 update: b
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Esxi (ccebe885-2aec-579d-b811-69cb98e44e56) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-22255 |
vulnerable | 2026-06-08 06:29:34.295486 |
Information disclosure vulnerability
HIGH (7.1)
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Published: 2024-03-05T17:58:35.987Z
Updated: 2025-08-26T20:15:06.691Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22254 |
vulnerable | 2026-06-08 06:29:34.291869 |
Out-of-bounds write vulnerability
HIGH (7.9)
VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.
Published: 2024-03-05T17:58:24.341Z
Updated: 2024-08-14T18:53:20.387Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22253 |
vulnerable | 2026-06-08 06:29:34.269053 |
Use-after-free vulnerability
CRITICAL (9.3)
VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
Published: 2024-03-05T17:57:27.297Z
Updated: 2024-08-16T19:12:32.633Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22252 |
vulnerable | 2026-06-08 06:29:34.256617 |
Use-after-free vulnerability
CRITICAL (9.3)
VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
Published: 2024-03-05T17:57:22.043Z
Updated: 2025-03-27T19:50:25.416Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21974 |
vulnerable | 2026-06-08 05:29:59.381417 |
Details available
OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability. A malicious actor residing within the same network segment as ESXi who has access to port 427 may be able to trigger the heap-overflow issue in OpenSLP service resulting in remote code execution.
Published: 2021-02-24T16:57:33.000Z
Updated: 2026-06-02T20:00:52.080Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.