vmware_cloud_foundation vulnerabilities

3 known vulnerabilities in vmware_cloud_foundation from Broadcom. 3 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  VMware vCenter Server Privilege Escalation Exploited

  CVE-2024-38813Sep 17, 2024VMware vCenter ServerEPSS 17.4%

  The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

• 9.8 Critical severity

  VMware vCenter Server Heap-Based Buffer Overflow Exploited

  CVE-2024-38812Sep 17, 2024VMware vCenter ServerEPSS 54.6%

  The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to

• 8.2 High severity

  VMware ESXi: Out-of-bounds Write

  CVE-2024-22254Mar 5, 2024VMware ESXi

  VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.