{"schema_version":"1","data":[{"id":3740,"advisory_id":"5c44762e-fa2a-4a33-9dcc-532a18313cfa","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3992","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:40:12.814142+00:00","extraction_method":"structured","technologies":["core-kev","esxi"],"cve_ids":["CVE-2020-3992"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"VMware ESXi OpenSLP Use-After-Free Vulnerability","summary":"VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-3992","products":[{"name":{"value":"ESXi","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-3992","aliases":["CVE-2020-3992"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2020-3992","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3992","dueDate":"2022-05-03","product":"ESXi","dateAdded":"2021-11-03","vendorProject":"VMware","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.","vulnerabilityName":"VMware ESXi OpenSLP Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2020-3992","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1119,"advisory_id":"49dc8003-9cce-407c-b3d3-632075e40709","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085","source_published_at":"2024-07-30T00:00:00+00:00","published_at":"2026-10-24T20:56:45.77068+00:00","extraction_method":"structured","technologies":["core-kev","esxi"],"cve_ids":["CVE-2024-37085"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"VMware ESXi Authentication Bypass Vulnerability","summary":"VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-37085","products":[{"name":{"value":"ESXi","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-37085","aliases":["CVE-2024-37085"],"affected":[],"modified":"2024-07-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-305"],"cveID":"CVE-2024-37085","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505;   https://nvd.nist.gov/vuln/detail/CVE-2024-37085","dueDate":"2024-08-20","product":"ESXi","dateAdded":"2024-07-30","vendorProject":"VMware","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.","vulnerabilityName":"VMware ESXi Authentication Bypass Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2024-37085","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":469,"advisory_id":"5ef45628-22e3-4027-bf49-de8fb29dedba","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-22225","source_published_at":"2025-03-04T00:00:00+00:00","published_at":"2026-10-24T20:46:31.897101+00:00","extraction_method":"structured","technologies":["core-kev","esxi"],"cve_ids":["CVE-2025-22225"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"VMware ESXi Arbitrary Write Vulnerability","summary":"VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2025-22225","products":[{"name":{"value":"ESXi","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-22225","aliases":["CVE-2025-22225"],"affected":[],"modified":"2025-03-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-123"],"cveID":"CVE-2025-22225","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22225","dueDate":"2025-03-25","product":"ESXi","dateAdded":"2025-03-04","vendorProject":"VMware","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.","vulnerabilityName":"VMware ESXi Arbitrary Write Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2025-22225","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3740,"next_before":469}