Sploitus

23 exploited vulnerabilities in Vmware Esxi

Vulnerabilities with publicly known exploits

Vendors
Vmware, Alt Linux, Centos, Openslp, Red Hat, Canonical
With known exploits
23
Affected Vmware Cloud Foundation versions
< 3.10.1.2, 4.1.0.1, 5.2, 3.10, 4.0.1
Affected Vmware Esxi versions
= 6.5, 6.7, 7.0.0, 6.0, 7.0, 8.0, 3.5, 4.0, 4.1
Affected Vmware Horizon Daas versions
< 9.0.0.0
Affected Nvidia Gpu Driver versions
All versions
Affected Vmware Workstation versions
< 14.1.4, 15.0.0, 16.2.5, 8.0, 8.0.0.18997, 8.0.1, 8.0.1.27038, 8.0.2, 8.0.3, 8.0.4, 9.0, 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.5, 7.0, 7.0.1, 7.1, 7.1.1, 7.1.2, 15.5.2
Affected Vmware Workstation Pro versions
< 12.5.8, 14.0, 14.1.0, 12.1.1
Affected Vmware Fusion versions
< 8.5.8, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 1.0, 1.1, 1.1.1, 1.1.2, 1.1.3, 11.5.2, 8.5.6
Affected Vmware Workstation Player versions
< 12.1.1

Vulnerabilities with exploits

Highest CVSS first — 17 of these already have exploit code on Sploitus

CVE-2020-3992 2 exploits
CVSS 10.0 CRITICAL 2020-10-15FIX AVAILABLE
ESXi OpenSLP堆溢出漏洞（CVE-2021-21974）Exploit for Out-of-bounds Write in Vmware Horizon_Daas
CVE-2019-5544 1 exploit
CVSS 10.0 CRITICAL 2019-12-05
Exploit for Out-of-bounds Write in Vmware Horizon_Daas
CVE-2019-5684
CVSS 10.0 HIGH 2019-02-13
CVE-2018-6981 1 exploit
CVSS 8.8 HIGH 2018-12-04FIX AVAILABLE
Exploit for Out-of-bounds Write in F5 Nginx
CVE-2017-4933 1 exploit
CVSS 8.8 HIGH 2017-12-20FIX AVAILABLE
VMware VNC Dynamic Resolution Request Code Execution Vulnerability(CVE-2017-4933)
CVE-2017-4924
CVSS 8.8 HIGH 2017-09-15FIX AVAILABLE
CVE-2024-37085
CVSS 8.3 HIGH 2024-06-25
CVE-2022-31705
CVSS 8.2 HIGH 2022-12-13
CVE-2016-5330 4 exploits
CVSS 7.8 HIGH 2016-08-08FIX AVAILABLE
VMware Host Guest Client Redirector - DLL Side Loading ExploitDLL Side Loading In VMware Host Guest Client Redirector
CVE-2015-5177
CVSS 7.5 HIGH 2015-08-07
CVE-2013-1406 3 exploits
CVSS 7.2 HIGH 2013-02-11FIX AVAILABLE
Conceptronic C54APM HTTP应答拆分漏洞VMware Virtual Machine Communication Interface (VMCI) - vmci.sys
CVE-2010-4297 4 exploits
CVSS 7.2 HIGH 2010-12-06FIX AVAILABLE
VMware Tools update OS Command InjectionVMware Tools - Update OS Command Injection
CVE-2012-1666 2 exploits
CVSS 6.9 MEDIUM 2012-09-08FIX AVAILABLE
VMWare Tools Binary PlantingThinPrint - 'tpfc.dll' Insecure Library Loading Arbitrary Code Execution
CVE-2009-2267 4 exploits
CVSS 6.9 MEDIUM 2009-11-02FIX AVAILABLE
VMWare Virtual 8086 Linux Local Ring0 ExploitInvalid #PF Exception Code in VMware can result in Guest Privilege Escalation
CVE-2009-1244 1 exploit
CVSS 6.8 MEDIUM 2009-04-13FIX AVAILABLE
Immunity Canvas: CLOUDBURST
CVE-2005-3619
CVSS 6.8 MEDIUM 2005-12-31FIX AVAILABLE
CVE-2020-3963 1 exploit
CVSS 5.5 MEDIUM 2020-06-23FIX AVAILABLE
VMware ESXi Use-After-Free / Out-Of-Bounds Access Vulnerability
CVE-2020-3965 1 exploit
CVSS 5.5 MEDIUM 2020-06-23FIX AVAILABLE
VMware ESXi Use-After-Free / Out-Of-Bounds Access Vulnerability
CVE-2017-4905 4 exploits
CVSS 5.5 MEDIUM 2017-03-30FIX AVAILABLE
Exploit for Use of Uninitialized Resource in Vmware FusionVMware WorkStation 12.5.3 - Virtual Machine Escape Exploit
CVE-2025-41228 2 exploits
CVSS 5.0 MEDIUM 2025-05-20
📄 VMware vSphere Client 8.0.3.0 Cross Site ScriptingVMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS)
CVE-2010-3609 2 exploits
CVSS 5.0 MEDIUM 2011-03-11FIX AVAILABLE
OpenSLP 1.2.1 / < 1647 trunk - Denial of ServiceSLP (Service Location Protocol) Denial Of Service
CVE-2009-3733 8 exploits
CVSS 5.0 MEDIUM 2009-11-02FIX AVAILABLE
VMware Server Directory TraversalVMware Server Directory Traversal Vulnerability
CVE-2020-3964 1 exploit
CVSS 4.7 MEDIUM 2020-06-23FIX AVAILABLE
VMware ESXi Use-After-Free / Out-Of-Bounds Access Vulnerability