CVE-2022-31696: VMware Cloud Foundation

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox.

Affected products

• VMware Cloud Foundation: from 3.0, before 3.10 (fixed in 3.10); from 4.0, before 4.3.11 (fixed in 4.3.11); version 3.10 only; version 3.11 only; version 4.3.11 only; version 4.4 only; …
• VMware ESXi: version 6.5 only; version 6.7 only; version 7.0 only

Published 2022-12-13. Last modified 2026-06-17.