Security News

주요 제품 취약점 (7건)

"VMware ESXi" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
VMware ESXi
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after…
CVE-2020-3992 9.8 CWE-416 KEV 2021-11-03
VMware ESXi VMware VMware ESXi and Horizon DaaS
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Crit…
CVE-2019-5544 9.8 CWE-787 KEV 2021-11-03
VMware ESXi VMware ESXi and Workstation
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with …
CVE-2025-22224 9.3 CWE-367 KEV 2025-03-04
VMware ESXi
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write…
CVE-2025-22225 8.2 CWE-787 KEV 2025-03-04
VMware ESXi VMware ESXi, Workstation, and Fusion
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with adm…
CVE-2025-22226 7.1 CWE-125 KEV 2025-03-04
VMware ESXi
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access…
CVE-2024-37085 6.8 CWE-287 KEV 2024-07-30
VMware ESXi VMware Tools
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of…
CVE-2023-20867 3.9 CWE-287 KEV 2023-06-23