VMware VMware Cloud Foundation

Name: VMware VMware Cloud Foundation
Brand: VMware

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

critical

by severity

0critical2high0medium0low

updated 2026-10-27

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-41244US	—OT critical	8.63% (95th)	KEV	8.18.5	2025-09-29	2 versions
CVE-2025-22224US	high8.2OT critical	1.56% (75th)	KEV	no fix	2025-03-04	≤ 5.x, 4.5.x
CVE-2026-22721US	high7.2	0.74% (54th)	—	5.2.3	2026-02-25	4 versions
CVE-2025-41245US	—OT elevated	0.61% (49th)	—	8.18.5	2025-09-29	2 versions
CVE-2025-22249US	—	0.36% (29th)	—	8.18.1 patch 2	2025-05-13	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-267Privilege Defined With Unsafe Actions1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.