VMware Cloud Foundation vulnerabilities
4 known vulnerabilities in VMware Cloud Foundation from VMware. 4 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
VMware Aria Operations: Improper Privilege Management
VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721,
- 7.8 High severity
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Exploited
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploi
- 8.2 High severity
Vmware Aria Automation: Improper Neutralization of Input During Web Page Generation
VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious craf
- 8.2 High severity
VMware ESXi and Workstation TOCTOU Race Condition Exploited
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual mach