Telco Cloud Infrastructure CVE-2025-22244

VMware ESXi and Workstation contain a TOCTOU race condition leading to out-of-bounds write, allowing local administrator

Remote code execution in VMware vCenter Server (and bundled distributions including Cloud Foundation, vSphere Foundation

VMware ESXi contains an arbitrary write vulnerability that allows privileged VMX process users to trigger kernel writes,

VMware Aria Operations contains a command injection vulnerability (CVE-2026-22719, CVSS 8.1) that allows unauthenticated

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability via HGFS out-of-bounds read, allowi

Authentication bypass in VMware vCenter's Directory Service (vmdir) lets an attacker with network reachability to vCente

Stored XSS in VMware Aria Operations allows authenticated users with benchmark creation privileges to inject malicious s

VMware NSX Manager UI is vulnerable to stored cross-site scripting (XSS) attacks via improper input validation in user-c

Privilege escalation in VMware Aria Operations allows authenticated users with vCenter access to escalate their privileg

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validatio

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. Rated high severity (CVSS 7.