# Vmware Esxi


- [CVE-2020-3992](https://insights.sbomify.com/CVE-2020-3992/): VMware ESXi OpenSLP Use-After-Free (critical 9.8, exploited in the wild)
- [CVE-2019-5544](https://insights.sbomify.com/CVE-2019-5544/): VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2025-22224](https://insights.sbomify.com/CVE-2025-22224/): VMware ESXi and Workstation TOCTOU Race Condition (critical 9.3, exploited in the wild)
- [CVE-2025-22225](https://insights.sbomify.com/CVE-2025-22225/): VMware ESXi Arbitrary Write (high 8.2, exploited in the wild)
- [CVE-2010-3904](https://insights.sbomify.com/CVE-2010-3904/): Linux Kernel Improper Input Validation (high 7.8, exploited in the wild)
- [CVE-2023-29552](https://insights.sbomify.com/CVE-2023-29552/): Service Location Protocol (SLP) Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2025-22226](https://insights.sbomify.com/CVE-2025-22226/): VMware ESXi, Workstation, and Fusion Information Disclosure (high 7.1, exploited in the wild)
- [CVE-2024-37085](https://insights.sbomify.com/CVE-2024-37085/): VMware ESXi Authentication Bypass (medium 6.8, exploited in the wild)
- [CVE-2026-41709](https://insights.sbomify.com/CVE-2026-41709/): Broadcom VMWare ESX Insufficient Logging (low 2.7, exploited in the wild)
- [CVE-2013-1405](https://insights.sbomify.com/CVE-2013-1405/): Auth bypass in n/a (critical 10.0)
- [CVE-2012-1516](https://insights.sbomify.com/CVE-2012-1516/): Memory corruption in n/a (critical 9.9)
- [CVE-2021-21994](https://insights.sbomify.com/CVE-2021-21994/): Auth bypass in VMware ESXi and VMware Cloud Foundation (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/vmware/esxi/