https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:19:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-02354 bdu:2025-02354 https://cve.radiocsirt.org/vuln/bdu:2025-02354 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0177 certfr-2025-avi-0177 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0177 https://cve.radiocsirt.org/vuln/euvd-2026-273526 EUVD-2026-273526 https://cve.radiocsirt.org/vuln/euvd-2026-273526 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22224 <p>VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine&#39;s VMX process running on the host.</p> <p>VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine&#39;s VMX process running on the host.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-22224 https://cve.radiocsirt.org/vuln/ghsa-j652-46fv-w96g <p>VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine&#39;s VMX process running on the host.</p> <p>VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine&#39;s VMX process running on the host.</p> https://cve.radiocsirt.org/vuln/ghsa-j652-46fv-w96g https://cve.radiocsirt.org/vuln/icsa-25-077-02 <p>A time of check time of use (TOCTOU) vulnerability exists in VMware ESXi, which the affected products use. Exploitation of the vulnerability can allow a threat actor with local administrative privileges to execute code as the virtual machine&#39;s VMX process running on the host. A code execution vulnerability exists in VMware ESXi, which the affected products use. Exploitation of the vulnerability can allow a threat actor with privileges within the VMX process trigger an arbitrary kernel write, leading to an escape of the sandbox. An out-of-bounds vulnerability exists in VMware ESXi, which the affected products use. Exploitation of the vulnerability can allow a threat actor with administrative privileges to leak memory from the vmx process.</p> <p>A time of check time of use (TOCTOU) vulnerability exists in VMware ESXi, which the affected products use. Exploitation of the vulnerability can allow a threat actor with local administrative privileges to execute code as the virtual machine&#39;s VMX process running on the host. A code execution vulnerability exists in VMware ESXi, which the affected products use. Exploitation of the vulnerability can allow a threat actor with privileges within the VMX process trigger an arbitrary kernel write, leading to an escape of the sandbox. An out-of-bounds vulnerability exists in VMware ESXi, which the affected products use. Exploitation of the vulnerability can allow a threat actor with administrative privileges to leak memory from the vmx process.</p> https://cve.radiocsirt.org/vuln/icsa-25-077-02 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0480 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in VMware ESXi, VMware Workstation, VMware Fusion und VMware Cloud Foundation ausnutzen, um beliebigen Code auszuführen, erhöhte Rechte zu erlangen und vertrauliche Informationen preiszugeben.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in VMware ESXi, VMware Workstation, VMware Fusion und VMware Cloud Foundation ausnutzen, um beliebigen Code auszuführen, erhöhte Rechte zu erlangen und vertrauliche Informationen preiszugeben.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0480