CVE-2022-31681: VMware Cloud Foundation

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host.

Affected products

• VMware Cloud Foundation: from 4.2, before 4.3.1.1 (fixed in 4.3.1.1); version 4.4 only; version 4.4.1 only; version 4.4.1.1 only
• VMware ESXi: before 7.0 (fixed in 7.0); version 7.0 only

Published 2022-10-07. Last modified 2026-06-17.