Advisories · Technology
VMware Telco Cloud Infrastructure.
Every CVE that names VMware Telco Cloud Infrastructure among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
vCenter authentication-bypass vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Authentication bypass
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+KEV · ransomware
vCenter directory-traversal vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Path traversal
- CVSS 6.2 Medium
VMware Aria Operations privilege escalation vulnerability
- VMware Aria Operations
- VMware Cloud Foundation
- Privilege escalation
- CVSS 8.0 High
VMware Aria Operations stored cross-site scripting vulnerability
- VMware Aria Operations
- VMware Cloud Foundation Operations
- Cross-site scripting (XSS)
- CVSS 8.1 HighCritical · KEV, CVSS 7+ and EPSSKEV
VMware Aria Operations command injection vulnerability
- VMware Aria Operations
- VMware Cloud Foundation Operations
- Command injection
- CVSS 8.5 High
Header injection vulnerability
- VMware vCenter
- VMware Cloud Foundation
- Command injection
- CVSS 4.9 Medium
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
- VMware Aria Operations
- VMware Cloud Foundation
- CWE-1188
- CVSS 7.8 HighCritical · KEVKEV
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
- VMware VCF operations
- VMware tools
- Privilege escalation
- CVSS 4.4 Medium
Denial-of-service vulnerability
- VMware vCenter
- VMware Cloud Foundation
- CWE-754
- CVSS 7.1 High
vSockets information-disclosure vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
PVSCSI heap-overflow vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
VMCI integer-underflow vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
VMXNET3 integer-overflow vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
- CVSS 4.3 Medium
VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability
- VMware vCenter Server
- VMware Cloud Foundation
- Cross-site scripting (XSS)
- CVSS 5.5 Medium
Denial-of-Service Vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Denial of service
- CVSS 6.8 Medium
Guest Operations Denial-of-Service Vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Denial of service
- CVSS 8.8 High
VMware vCenter Server authenticated command-execution vulnerability
- VMware vCenter Server
- VMware Cloud Foundation
- Command injection
- CVSS 7.1 HighCritical · KEVKEV
Out-of-bounds read in ESXi and others
- ESXi
- VMware Workstation
- Memory corruption
- CVSS 8.2 HighCritical · KEVKEV · ransomware
VMware ESXi contains an arbitrary write vulnerability.
- VMware ESXi
- VMware Cloud Foundation
- CWE-123
- CVSS 9.3 CriticalCritical · KEV, CVSS 9+KEV
Time-of-check time-of-use race condition in VMware ESXi and others
- VMware ESXi
- VMware Workstation
- Race condition