Telco Cloud Platform (Vmware) - vulnerabilities (CVEs)

17 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2026-07-30. Vendor: Vmware.

CVEs of Telco Cloud Platform

CVE-2026-41709 - CVSS 2.7 (low), 2026-07-30: VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being…
CVE-2026-41703 - CVSS 7.6 (high), 2026-07-30: VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an…
CVE-2026-47876 - CVSS 9.3 (critical), 2026-07-30: VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a…
CVE-2026-59309 - CVSS 9.8 (critical), 2026-07-30: VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit…
CVE-2026-59310 - CVSS 9.8 (critical), 2026-07-30: VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to…
CVE-2026-41724 - CVSS 8 (high), 2026-06-08: VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views…
CVE-2026-41723 - CVSS 8 (high), 2026-06-08: VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views…
CVE-2026-41722 - CVSS 8 (high), 2026-06-08: VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views…
CVE-2026-22721 - CVSS 7.2 (high), 2026-02-25: VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this…
CVE-2026-22720 - CVSS 9 (critical), 2026-02-25: VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to…
CVE-2026-22719 - CVSS 8.1 (high), 2026-02-25: VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands…
CVE-2025-41250 - CVSS 8.5 (high), 2025-09-29: VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create…
CVE-2025-41244 - CVSS 7.8 (high), 2025-09-29: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having…
CVE-2025-41241 - CVSS 4.4 (medium), 2025-07-29: VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for…
CVE-2025-41237 - CVSS 9.3 (critical), 2025-07-15: VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI (Virtual Machine Communication Interface) that leads to an out-of-bounds write. A…
CVE-2025-41239 - CVSS 7.1 (high), 2025-07-15: VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A…
CVE-2025-41238 - CVSS 9.3 (critical), 2025-07-15: VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI) controller that leads to an out of-bounds…
CVE-2025-41236 - CVSS 9.3 (critical), 2025-07-15: VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local…
CVE-2025-22245 - CVSS 5.9 (medium), 2025-06-04: VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation.
CVE-2025-22244 - CVSS 6.9 (medium), 2025-06-04: VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation.
CVE-2025-22243 - CVSS 7.5 (high), 2025-06-04: VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation.
CVE-2025-41226 - CVSS 6.8 (medium), 2025-05-20: VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor with guest operation privileges on a…
CVE-2025-41225 - CVSS 8.8 (high), 2025-05-20: The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script…
CVE-2025-41228 - CVSS 4.3 (medium), 2025-05-20: VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access…
CVE-2025-41227 - CVSS 5.5 (medium), 2025-05-20: VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative…
CVE-2025-22249 - CVSS 8.2 (high), 2025-05-13: VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a…
CVE-2025-22226 - CVSS 7.1 (high), 2025-03-04: VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with…
CVE-2025-22225 - CVSS 8.2 (high), 2025-03-04: VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading…
CVE-2025-22224 - CVSS 9.3 (critical), 2025-03-04: VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local…