CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
VMware ESX Insufficient Logging Vulnerability (CVE-2026-41709) - Audit Bypass and Admin Activity Concealment
[Affected Scope] VMware ESX hypervisor environments.
[Impact] High-privileged attackers can perform unauthorized operations without generating audit logs, hindering incident response and forensic analysis.
[Mitigation] Apply the latest security patches from Broadcom and strengthen external Syslog integration.
VMware ESXi VMX Process Arbitrary Write and Sandbox Escape Vulnerability (CVE-2025-22225) Security Advisory
[Affected Scope] Virtual machines and environments running on VMware ESXi hypervisors where attackers hold privileges within the VMX process
[Impact] Escape of the hypervisor sandbox and potential host takeover via arbitrary kernel write from the guest OS
[Mitigation] Immediately apply the official security patches provided by Broadcom and restrict administrative access to the VMX process