VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2022 0030 | — | Upgrade VMware ESXi 7.0.0 to build number 20842708Upgrade VMware ESXi 6.7 to build number 20497097Upgrade VMware ESXi 6.5 to build number 20502893Upgrade VMware ESXi 7.0.1 to build number 20842708Upgrade VMware ESXi 7.0.3 to build number 20842708Upgrade VMware ESXi 7.0.2 to build number 20842708 | Jan 9, 2023 | Dec 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub