Vmware Cloud Foundation (Vmware) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-02-25. Vendor: Vmware.

CVEs of Vmware Cloud Foundation

• CVE-2026-22721 - CVSS 7.2 (high), 2026-02-25: VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this…
• CVE-2025-41245 - CVSS 4.9 (medium), 2025-09-29: VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit…
• CVE-2025-41244 - CVSS 7.8 (high), 2025-09-29: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having…
• CVE-2025-22249 - CVSS 8.2 (high), 2025-05-13: VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a…
• CVE-2025-22224 - CVSS 9.3 (critical), 2025-03-04: VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local…