VMware Cloud Foundation
17 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-41709 | 9.1.x.x ; 9.0.x.x ; 5.x – < 5.2.4 | ESX insufficient logging vulnerability | LOW 2.7 | 0.3 % | ||
| CVE-2026-41703 | 9.1.x.x ; 9.0.x.x ; 5.x – < 5.2.3 | Out-of-bounds read vulnerability | HIGH 7.6 | 0.4 % | ||
| CVE-2026-47876 | 9.1.x.x ; 9.0.x.x ; 5.x | VMXNET3 out-of-bounds write vulnerability | CRITICAL 9.3 | 0.2 % | ||
| CVE-2026-59309 | 9.1.x.x ; 9.0.x.x ; 5.x | vCenter authentication-bypass vulnerability | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-59310 | 9.1.x.x ; 9.0.x.x ; 5.x | vCenter directory-traversal vulnerability | CRITICAL 9.8 | 2.6 % | KEV | |
| CVE-2025-41250 | 9.x.x.x – < 9.0.1.0 ; 5.x – < 5.2.2 ; 4.5.x | Header injection vulnerability | HIGH 8.5 | 0.7 % | ||
| CVE-2025-41241 | 5.x, 4.5.x | Denial-of-service vulnerability | MEDIUM 4.4 | 0.3 % | ||
| CVE-2025-41239 | 5.x, 4.5.x | vSockets information-disclosure vulnerability | HIGH 7.1 | 3.2 % | ||
| CVE-2025-41238 | 5.x, 4.5.x | PVSCSI heap-overflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41237 | 9.0.0.0, 5.x, 4.5.x | VMCI integer-underflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41236 | 5.x, 4.5.x | VMXNET3 integer-overflow vulnerability | CRITICAL 9.3 | 2.6 % | ||
| CVE-2025-41228 | 5.x, 4.5.x | VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability | MEDIUM 4.3 | 0.9 % | ||
| CVE-2025-41227 | 5.x, 4.5.x | Denial-of-Service Vulnerability | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-41226 | 5.x, 4.5.x | Guest Operations Denial-of-Service Vulnerability | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-41225 | 5.x, 4.5.x | VMware vCenter Server authenticated command-execution vulnerability | HIGH 8.8 | 0.3 % | ||
| CVE-2025-41230 | 5.x – < 5.2.1.2 ; 4.5.x | VMware Cloud Foundation Information Disclosure Vulnerability | HIGH 7.5 | 0.4 % | ||
| CVE-2025-41229 | 5.x – < 5.2.1.2 ; 4.5.x | VMware Cloud Foundation Directory Traversal Vulnerability | HIGH 8.2 | 0.7 % |