VMWare VMware Cloud Foundation

• CVE-2025-41244 High 7.8 Exploited VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) 8.6%
• CVE-2025-22224 Critical 9.3 Exploited VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machin 1.6%
• CVE-2026-22721 Medium 6.2 VMware Aria Operations privilege escalation vulnerability 0.7%
• CVE-2025-41245 Medium 4.9 VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) 0.6%
• CVE-2025-22249 High 8.2 VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) 0.4%