CVE-2022-31699: VMware Cloud Foundation

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.

Affected products

• VMware Cloud Foundation: version 3.0 only; version 3.0.1 only; version 3.0.1.1 only; version 3.5 only; version 3.5.1 only; version 3.7 only; …
• VMware ESXi: version 6.5 only; version 6.7 only; version 7.0 only

Published 2022-12-13. Last modified 2026-06-17.