VMware Vsphere ESXi vulnerabilities

2 CVEs affecting VMware Vsphere ESXi, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3960, published 2021-09-15.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-5531, published 2019-09-18. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMware vCenter Server (6.7 prior to 6.7 U1b, 6.5 prior to 6.5…
• CVE-2020-3960, published 2021-09-15. High severity, CVSS 8.4. EPSS: 0.3% chance of exploitation in the next 30 days. VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in…