Photon OS

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-229423.0, 4.0The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by otherHIGH 7.82.6 %
CVE-2021-22055Master buildThe SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert mMEDIUM 5.31.0 %