Skip to content

Vulnerabilities of VMware ESXi

Is your version affected?

CVE Summary Score Published
CVE-2025-41239 VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage… 7.1 High Jul 15, 2025
CVE-2025-41238 VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI)… 9.3 Critical Jul 15, 2025
CVE-2025-41237 VMCI integer-underflow vulnerability 9.3 Critical Jul 15, 2025
CVE-2025-41236 VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A… 9.3 Critical Jul 15, 2025
CVE-2025-41228 VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input… 4.3 Medium May 20, 2025
CVE-2025-41227 VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious… 5.5 Medium May 20, 2025
CVE-2025-41226 VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious… 6.8 Medium May 20, 2025
CVE-2025-22224 Exploited VMware ESXi and Workstation TOCTOU Race Condition Vulnerability 9.3 Critical Mar 4, 2025
CVE-2024-37085 Exploited VMware ESXi Authentication Bypass Vulnerability 6.8 Medium Jun 25, 2024
CVE-2024-22273 The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious… 8.1 High May 21, 2024
CVE-2024-22253 VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious… 9.3 Critical Mar 5, 2024
CVE-2024-22252 VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious… 9.3 Critical Mar 5, 2024
CVE-2020-3955 ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize… Not rated Apr 29, 2020
CVE-2019-5528 VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process Not rated Jul 11, 2019
CVE-2019-5517 VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x… Not rated Apr 15, 2019
CVE-2019-5520 VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x… Not rated Apr 15, 2019
CVE-2019-5516 VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x… Not rated Apr 15, 2019
CVE-2018-6974 VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG),… Not rated Oct 16, 2018
CVE-2018-6977 VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service… Not rated Oct 9, 2018
CVE-2018-6972 VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5… Not rated Jul 25, 2018
CVE-2017-4933 VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a… Not rated Dec 20, 2017
CVE-2017-4941 VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion… Not rated Dec 20, 2017
CVE-2017-4940 The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before… Not rated Dec 20, 2017
CVE-2017-4925 VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without… Not rated Sep 15, 2017
CVE-2017-4924 VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before… Not rated Sep 15, 2017

Other VMware products