Skip to content

Vulnerabilities of VMware Cloud Foundation

Is your version affected?

CVE Summary Score Published
CVE-2026-41709 Exploited Broadcom VMWare ESX Insufficient Logging Vulnerability 2.7 Low Jul 30, 2026
CVE-2026-41703 VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability 7.6 High Jul 30, 2026
CVE-2026-47876 VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor… 9.3 Critical Jul 30, 2026
CVE-2026-59309 VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with… 9.8 Critical Jul 30, 2026
CVE-2026-59310 Exploited Broadcom VMware vCenter Path Traversal Vulnerability 9.8 Critical Jul 30, 2026
CVE-2025-41250 VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges… 8.5 High Sep 29, 2025
CVE-2025-41241 VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and… 4.4 Medium Jul 29, 2025
CVE-2025-41239 VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage… 7.1 High Jul 15, 2025
CVE-2025-41238 VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI)… 9.3 Critical Jul 15, 2025
CVE-2025-41237 VMCI integer-underflow vulnerability 9.3 Critical Jul 15, 2025
CVE-2025-41236 VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A… 9.3 Critical Jul 15, 2025
CVE-2025-41228 VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input… 4.3 Medium May 20, 2025
CVE-2025-41227 VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious… 5.5 Medium May 20, 2025
CVE-2025-41226 VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious… 6.8 Medium May 20, 2025
CVE-2025-41225 The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to… 8.8 High May 20, 2025
CVE-2025-41230 VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with network access to… 7.5 High May 20, 2025
CVE-2025-41229 VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port… 8.2 High May 20, 2025

Other VMware products