VMware Telco Cloud Infrastructure vulnerabilities

20 CVEs affecting VMware Telco Cloud Infrastructure, 5 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-22721, published 2026-02-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-22719: Broadcom VMware Aria Operations Command Injection Vulnerability, published 2026-02-25. High severity, CVSS 8.1. Actively exploited: in CISA KEV since 2026-03-03. EPSS: 18.1% chance of exploitation in the next 30 days. VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in…
CVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability, published 2025-09-29. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2025-10-30. EPSS: 8.4% chance of exploitation in the next 30 days. VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware…
CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability, published 2025-03-04. Medium severity, CVSS 6.0. Actively exploited: in CISA KEV since 2025-03-04. EPSS: 1.8% chance of exploitation in the next 30 days. VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be…
CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability, published 2025-03-04. High severity, CVSS 8.2. Actively exploited: in CISA KEV since 2025-03-04. EPSS: 1.6% chance of exploitation in the next 30 days. VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual…
CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability, published 2025-03-04. High severity, CVSS 8.2. Actively exploited: in CISA KEV since 2025-03-04. EPSS: 1% chance of exploitation in the next 30 days. VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.
CVE-2025-41239, published 2025-07-15. High severity, CVSS 7.1. EPSS: 3.2% chance of exploitation in the next 30 days. VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local…
CVE-2025-41236, published 2025-07-15. Critical severity, CVSS 9.3. EPSS: 2.7% chance of exploitation in the next 30 days. VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with…
CVE-2025-41228, published 2025-05-20. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or…
CVE-2026-22721, published 2026-02-25. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative…
CVE-2025-41250, published 2025-09-29. High severity, CVSS 8.5. EPSS: 0.6% chance of exploitation in the next 30 days. VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate…

Latest

CVE-2026-22720, published 2026-02-25. Critical severity, CVSS 9.0. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative…
CVE-2025-41241, published 2025-07-29. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this…
CVE-2025-41238, published 2025-07-15. Critical severity, CVSS 9.3. EPSS: 0.5% chance of exploitation in the next 30 days. VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI) controller that leads to an out of-bounds write. A malicious actor with local…
CVE-2025-41237, published 2025-07-15. Critical severity, CVSS 9.3. EPSS: 0.5% chance of exploitation in the next 30 days. VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI (Virtual Machine Communication Interface) that leads to an out-of-bounds write. A malicious actor with local administrative…