# ESXi vulnerabilities

> ESXi is made by VMware. We track 138 published vulnerabilities in it, across 20 versions. 8 of them are on the list of flaws known to be exploited, the newest added on 4 March 2025. If you run ESXi, check your version against the exploited flaws below and patch those first.

Canonical page: https://www.precursorintelligence.com/product/vmware/esxi

## At a glance

- **Made by:** [VMware](https://www.precursorintelligence.com/vendors/vmware)
- **Published vulnerabilities:** 138
- **Known to be exploited:** 8
- **Versions tracked:** 20
- **Most recently added to the known-exploited list:** [CVE-2025-22224](https://www.precursorintelligence.com/what-is/cve-2025-22224), 4 March 2025. We keep watching the list.

## Which versions of ESXi do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published. "before 7.0" means every version up to, but not including, 7.0.

- [CVE-2025-22224](https://www.precursorintelligence.com/what-is/cve-2025-22224) (VMware ESXi and Workstation TOCTOU Race Condition Vulnerability): 7.0-beta, 7.0, 7.0-update_1a, 7.0-update_1b, 7.0-update_1, 7.0-update_1c, 7.0-update_1d, 7.0-update_1e, 7.0-update_2a, 7.0-update_2, 7.0-update_2c, 7.0-update_2d, 7.0-update_2e, 7.0-update_3, 7.0-update_3c, 7.0-update_3d, 7.0-update_3e, 7.0-update_3f, 7.0-update_3g, 7.0-update_3i, 7.0-update_3j, 7.0-update_3k, 7.0-update_3l, 7.0-update_3m, 7.0-update_3n, 7.0-update_3o, 7.0-update_3p, 7.0-update_3q, 7.0-update_3r, 8.0-a, 8.0-b, 8.0, 8.0-c, 8.0-update_1a, 8.0-update_1, 8.0-update_1c, 8.0-update_1d, 8.0-update_2b, 8.0-update_2, 8.0-update_2c, 8.0-update_3b, 8.0-update_3, 8.0-update_3c
- [CVE-2025-22226](https://www.precursorintelligence.com/what-is/cve-2025-22226) (VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability): 7.0-beta, 7.0, 7.0-update_1a, 7.0-update_1b, 7.0-update_1, 7.0-update_1c, 7.0-update_1d, 7.0-update_1e, 7.0-update_2a, 7.0-update_2, 7.0-update_2c, 7.0-update_2d, 7.0-update_2e, 7.0-update_3, 7.0-update_3c, 7.0-update_3d, 7.0-update_3e, 7.0-update_3f, 7.0-update_3g, 7.0-update_3i, 7.0-update_3j, 7.0-update_3k, 7.0-update_3l, 7.0-update_3m, 7.0-update_3n, 7.0-update_3o, 7.0-update_3p, 7.0-update_3q, 7.0-update_3r, 8.0-a, 8.0-b, 8.0, 8.0-c, 8.0-update_1a, 8.0-update_1, 8.0-update_1c, 8.0-update_1d, 8.0-update_2b, 8.0-update_2, 8.0-update_2c, 8.0-update_3b, 8.0-update_3, 8.0-update_3c
- [CVE-2025-22225](https://www.precursorintelligence.com/what-is/cve-2025-22225) (VMware ESXi Arbitrary Write Vulnerability): 7.0-beta, 7.0, 7.0-update_1a, 7.0-update_1b, 7.0-update_1, 7.0-update_1c, 7.0-update_1d, 7.0-update_1e, 7.0-update_2a, 7.0-update_2, 7.0-update_2c, 7.0-update_2d, 7.0-update_2e, 7.0-update_3, 7.0-update_3c, 7.0-update_3d, 7.0-update_3e, 7.0-update_3f, 7.0-update_3g, 7.0-update_3i, 7.0-update_3j, 7.0-update_3k, 7.0-update_3l, 7.0-update_3m, 7.0-update_3n, 7.0-update_3o, 7.0-update_3p, 7.0-update_3q, 7.0-update_3r, 8.0-a, 8.0-b, 8.0, 8.0-c, 8.0-update_1a, 8.0-update_1, 8.0-update_1c, 8.0-update_1d, 8.0-update_2b, 8.0-update_2, 8.0-update_2c, 8.0-update_3b, 8.0-update_3, 8.0-update_3c
- [CVE-2024-37085](https://www.precursorintelligence.com/what-is/cve-2024-37085) (VMware ESXi Authentication Bypass Vulnerability): 7.0, 8.0-a, 8.0-b, 8.0, 8.0-c, 8.0-update_1a, 8.0-update_1, 8.0-update_1c, 8.0-update_1d, 8.0-update_2b, 8.0-update_2, 8.0-update_2c
- [CVE-2023-29552](https://www.precursorintelligence.com/what-is/cve-2023-29552) (Service Location Protocol (SLP) Denial-of-Service Vulnerability): before 7.0
- [CVE-2010-3904](https://www.precursorintelligence.com/what-is/cve-2010-3904) (Linux Kernel Improper Input Validation Vulnerability): 3.5, 4.0, 4.1, 5.0
- [CVE-2020-3992](https://www.precursorintelligence.com/what-is/cve-2020-3992) (VMware ESXi OpenSLP Use-After-Free Vulnerability): 6.5, 6.5-2, 6.5-650-201701001, 6.5-650-201703001, 6.5-650-201703002, 6.5-650-201704001, 6.5-650-201707101, 6.5-650-201707102, 6.5-650-201707103, 6.5-650-201707201, 6.5-650-201707202, 6.5-650-201707203, 6.5-650-201707204, 6.5-650-201707205, 6.5-650-201707206, 6.5-650-201707207, 6.5-650-201707208, 6.5-650-201707209, 6.5-650-201707210, 6.5-650-201707211, 6.5-650-201707212, 6.5-650-201707213, 6.5-650-201707214, 6.5-650-201707215, 6.5-650-201707216, 6.5-650-201707217, 6.5-650-201707218, 6.5-650-201707219, 6.5-650-201707220, 6.5-650-201707221, 6.5-650-201710001, 6.5-650-201712001, 6.5-650-201803001, 6.5-650-201806001, 6.5-650-201808001, 6.5-650-201810001, 6.5-650-201810002, 6.5-650-201811001, 6.5-650-201811002, 6.5-650-201811301, 6.5-650-201901001, 6.5-650-201903001, 6.5-650-201905001, 6.5-650-201908001, 6.5-650-201910001, 6.5-650-201911001, 6.5-650-201911401, 6.5-650-201911402, 6.5-650-201912001, 6.5-650-201912002, 6.5-650-201912101, 6.5-650-201912102, 6.5-650-201912103, 6.5-650-201912104, 6.5-650-201912301, 6.5-650-201912401, 6.5-650-201912402, 6.5-650-201912403, 6.5-650-201912404, 6.5-650-202005001, 6.5-650-202006001, 6.5-650-202007001, 6.5-650-202010001, 6.5-650-20191004001, 6.7, 6.7-670-201806001, 6.7-670-201807001, 6.7-670-201808001, 6.7-670-201810001, 6.7-670-201810101, 6.7-670-201810102, 6.7-670-201810103, 6.7-670-201810201, 6.7-670-201810202, 6.7-670-201810203, 6.7-670-201810204, 6.7-670-201810205, 6.7-670-201810206, 6.7-670-201810207, 6.7-670-201810208, 6.7-670-201810209, 6.7-670-201810210, 6.7-670-201810211, 6.7-670-201810212, 6.7-670-201810213, 6.7-670-201810214, 6.7-670-201810215, 6.7-670-201810216, 6.7-670-201810217, 6.7-670-201810218, 6.7-670-201810219, 6.7-670-201810220, 6.7-670-201810221, 6.7-670-201810222, 6.7-670-201810223, 6.7-670-201810224, 6.7-670-201810225, 6.7-670-201810226, 6.7-670-201810227, 6.7-670-201810228, 6.7-670-201810229, 6.7-670-201810230, 6.7-670-201810231, 6.7-670-201810232, 6.7-670-201810233, 6.7-670-201810234, 6.7-670-201811001, 6.7-670-201901001, 6.7-670-201901401, 6.7-670-201901402, 6.7-670-201901403, 6.7-670-201903001, 6.7-670-201904001, 6.7-670-201904201, 6.7-670-201904201-ug, 6.7-670-201904202, 6.7-670-201904202-ug, 6.7-670-201904203, 6.7-670-201904203-ug, 6.7-670-201904204, 6.7-670-201904204-ug, 6.7-670-201904205, 6.7-670-201904205-ug, 6.7-670-201904206, 6.7-670-201904206-ug, 6.7-670-201904207, 6.7-670-201904207-ug, 6.7-670-201904208, 6.7-670-201904208-ug, 6.7-670-201904209, 6.7-670-201904209-ug, 6.7-670-201904210, 6.7-670-201904210-ug, 6.7-670-201904211, 6.7-670-201904211-ug, 6.7-670-201904212, 6.7-670-201904212-ug, 6.7-670-201904213, 6.7-670-201904213-ug, 6.7-670-201904214, 6.7-670-201904214-ug, 6.7-670-201904215, 6.7-670-201904215-ug, 6.7-670-201904216, 6.7-670-201904216-ug, 6.7-670-201904217, 6.7-670-201904217-ug, 6.7-670-201904218, 6.7-670-201904218-ug, 6.7-670-201904219, 6.7-670-201904219-ug, 6.7-670-201904220, 6.7-670-201904220-ug, 6.7-670-201904221, 6.7-670-201904221-ug, 6.7-670-201904222, 6.7-670-201904222-ug, 6.7-670-201904223, 6.7-670-201904223-ug, 6.7-670-201904224, 6.7-670-201904224-ug, 6.7-670-201904225, 6.7-670-201904225-ug, 6.7-670-201904226, 6.7-670-201904226-ug, 6.7-670-201904227, 6.7-670-201904227-ug, 6.7-670-201904228, 6.7-670-201904228-ug, 6.7-670-201904229, 6.7-670-201904229-ug, 6.7-670-201905001, 6.7-670-201906002, 6.7-670-201908101, 6.7-670-201908102, 6.7-670-201908103, 6.7-670-201908104, 6.7-670-201908201, 6.7-670-201908202, 6.7-670-201908203, 6.7-670-201908204, 6.7-670-201908205, 6.7-670-201908206, 6.7-670-201908207, 6.7-670-201908208, 6.7-670-201908209, 6.7-670-201908210, 6.7-670-201908211, 6.7-670-201908212, 6.7-670-201908213, 6.7-670-201908214, 6.7-670-201908215, 6.7-670-201908216, 6.7-670-201908217, 6.7-670-201908218, 6.7-670-201908219, 6.7-670-201908220, 6.7-670-201908221, 6.7-670-201912001, 6.7-670-201912101, 6.7-670-201912102, 6.7-670-201912401, 6.7-670-201912402, 6.7-670-201912403, 6.7-670-201912404, 6.7-670-201912405, 6.7-670-202004001, 6.7-670-202004002, 6.7-670-202004301, 6.7-670-202004401, 6.7-670-202004402, 6.7-670-202004403, 6.7-670-202004404, 6.7-670-202004405, 6.7-670-202004406, 6.7-670-202004407, 6.7-670-202004408, 6.7-670-202006001, 6.7-670-202008001, 6.7-670-202010001, 7.0.0, 7.0.0-1.20.16321839
- [CVE-2019-5544](https://www.precursorintelligence.com/what-is/cve-2019-5544) (VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability): 6.0, 6.0-1a, 6.0-1b, 6.0-1, 6.0-2, 6.0-3a, 6.0-3, 6.0-600-201504401, 6.0-600-201505401, 6.0-600-201507101, 6.0-600-201507102, 6.0-600-201507401, 6.0-600-201507402, 6.0-600-201507403, 6.0-600-201507404, 6.0-600-201507405, 6.0-600-201507406, 6.0-600-201507407, 6.0-600-201509101, 6.0-600-201509102, 6.0-600-201509201, 6.0-600-201509202, 6.0-600-201509203, 6.0-600-201509204, 6.0-600-201509205, 6.0-600-201509206, 6.0-600-201509207, 6.0-600-201509208, 6.0-600-201509209, 6.0-600-201509210, 6.0-600-201510401, 6.0-600-201511401, 6.0-600-201601101, 6.0-600-201601102, 6.0-600-201601401, 6.0-600-201601402, 6.0-600-201601403, 6.0-600-201601404, 6.0-600-201601405, 6.0-600-201602401, 6.0-600-201603101, 6.0-600-201603102, 6.0-600-201603201, 6.0-600-201603202, 6.0-600-201603203, 6.0-600-201603204, 6.0-600-201603205, 6.0-600-201603206, 6.0-600-201603207, 6.0-600-201603208, 6.0-600-201605401, 6.0-600-201608101, 6.0-600-201608401, 6.0-600-201608402, 6.0-600-201608403, 6.0-600-201608404, 6.0-600-201608405, 6.0-600-201610410, 6.0-600-201611401, 6.0-600-201611402, 6.0-600-201611403, 6.0-600-201702101, 6.0-600-201702102, 6.0-600-201702201, 6.0-600-201702202, 6.0-600-201702203, 6.0-600-201702204, 6.0-600-201702205, 6.0-600-201702206, 6.0-600-201702207, 6.0-600-201702208, 6.0-600-201702209, 6.0-600-201702210, 6.0-600-201702211, 6.0-600-201702212, 6.0-600-201703401, 6.0-600-201706101, 6.0-600-201706102, 6.0-600-201706103, 6.0-600-201706401, 6.0-600-201706402, 6.0-600-201706403, 6.0-600-201710301, 6.0-600-201811001, 6.0-600-201811401, 6.5, 6.5-650-201701001, 6.5-650-201703001, 6.5-650-201703002, 6.5-650-201704001, 6.5-650-201707101, 6.5-650-201707102, 6.5-650-201707103, 6.5-650-201707201, 6.5-650-201707202, 6.5-650-201707203, 6.5-650-201707204, 6.5-650-201707205, 6.5-650-201707206, 6.5-650-201707207, 6.5-650-201707208, 6.5-650-201707209, 6.5-650-201707210, 6.5-650-201707211, 6.5-650-201707212, 6.5-650-201707213, 6.5-650-201707214, 6.5-650-201707215, 6.5-650-201707216, 6.5-650-201707217, 6.5-650-201707218, 6.5-650-201707219, 6.5-650-201707220, 6.5-650-201707221, 6.5-650-201710001, 6.5-650-201712001, 6.5-650-201803001, 6.5-650-201806001, 6.5-650-201808001, 6.5-650-201810001, 6.5-650-201810002, 6.5-650-201811001, 6.5-650-201811002, 6.5-650-201811301, 6.5-650-201901001, 6.5-650-201903001, 6.5-650-201905001, 6.5-650-201908001, 6.5-650-201910001, 6.5-650-201911001, 6.5-650-201911401, 6.5-650-201911402, 6.5-650-20191004001, 6.7, 6.7-670-201806001, 6.7-670-201807001, 6.7-670-201808001, 6.7-670-201810001, 6.7-670-201810101, 6.7-670-201810102, 6.7-670-201810103, 6.7-670-201810201, 6.7-670-201810202, 6.7-670-201810203, 6.7-670-201810204, 6.7-670-201810205, 6.7-670-201810206, 6.7-670-201810207, 6.7-670-201810208, 6.7-670-201810209, 6.7-670-201810210, 6.7-670-201810211, 6.7-670-201810212, 6.7-670-201810213, 6.7-670-201810214, 6.7-670-201810215, 6.7-670-201810216, 6.7-670-201810217, 6.7-670-201810218, 6.7-670-201810219, 6.7-670-201810220, 6.7-670-201810221, 6.7-670-201810222, 6.7-670-201810223, 6.7-670-201810224, 6.7-670-201810225, 6.7-670-201810226, 6.7-670-201810227, 6.7-670-201810228, 6.7-670-201810229, 6.7-670-201810230, 6.7-670-201810231, 6.7-670-201810232, 6.7-670-201810233, 6.7-670-201810234, 6.7-670-201811001, 6.7-670-201901001, 6.7-670-201901401, 6.7-670-201901402, 6.7-670-201901403, 6.7-670-201903001, 6.7-670-201904001, 6.7-670-201904201, 6.7-670-201904202, 6.7-670-201904203, 6.7-670-201904204, 6.7-670-201904205, 6.7-670-201904206, 6.7-670-201904207, 6.7-670-201904208, 6.7-670-201904209, 6.7-670-201904210, 6.7-670-201904211, 6.7-670-201904212, 6.7-670-201904213, 6.7-670-201904214, 6.7-670-201904215, 6.7-670-201904216, 6.7-670-201904217, 6.7-670-201904218, 6.7-670-201904219, 6.7-670-201904220, 6.7-670-201904221, 6.7-670-201904222, 6.7-670-201904223, 6.7-670-201904224, 6.7-670-201904225, 6.7-670-201904226, 6.7-670-201904227, 6.7-670-201904228, 6.7-670-201904229, 6.7-670-201905001, 6.7-670-201906002, 6.7-670-201908101, 6.7-670-201908102, 6.7-670-201908103, 6.7-670-201908104, 6.7-670-201908201, 6.7-670-201908202, 6.7-670-201908203, 6.7-670-201908204, 6.7-670-201908205, 6.7-670-201908206, 6.7-670-201908207, 6.7-670-201908208, 6.7-670-201908209, 6.7-670-201908210, 6.7-670-201908211, 6.7-670-201908212, 6.7-670-201908213, 6.7-670-201908214, 6.7-670-201908215, 6.7-670-201908216, 6.7-670-201908217, 6.7-670-201908218, 6.7-670-201908219, 6.7-670-201908220, 6.7-670-201908221, 6.7-670-201911001

## Which ESXi vulnerabilities are being exploited?

8 flaws are on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2025-22224](https://www.precursorintelligence.com/what-is/cve-2025-22224): VMware ESXi and Workstation TOCTOU Race Condition Vulnerability. Critical, CVSS 9.3, chance of use in 30 days 1.6%, known exploited since 4 March 2025.
- [CVE-2025-22226](https://www.precursorintelligence.com/what-is/cve-2025-22226): VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability. High, CVSS 7.1, chance of use in 30 days 1.8%, known exploited since 4 March 2025.
- [CVE-2025-22225](https://www.precursorintelligence.com/what-is/cve-2025-22225): VMware ESXi Arbitrary Write Vulnerability. High, CVSS 8.2, chance of use in 30 days 1.0%, known exploited since 4 March 2025.
- [CVE-2024-37085](https://www.precursorintelligence.com/what-is/cve-2024-37085): VMware ESXi Authentication Bypass Vulnerability. Medium, CVSS 6.8, chance of use in 30 days 27%, known exploited since 30 July 2024.
- [CVE-2023-29552](https://www.precursorintelligence.com/what-is/cve-2023-29552): Service Location Protocol (SLP) Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 64%, known exploited since 8 November 2023.
- [CVE-2010-3904](https://www.precursorintelligence.com/what-is/cve-2010-3904): Linux Kernel Improper Input Validation Vulnerability. High, CVSS 7.8, chance of use in 30 days 16%, known exploited since 12 May 2023.
- [CVE-2020-3992](https://www.precursorintelligence.com/what-is/cve-2020-3992): VMware ESXi OpenSLP Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 83%, known exploited since 3 November 2021.
- [CVE-2019-5544](https://www.precursorintelligence.com/what-is/cve-2019-5544): VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 97%, known exploited since 3 November 2021.

## Which ESXi flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2019-5544](https://www.precursorintelligence.com/what-is/cve-2019-5544): 97%, Critical (CVSS 9.8), known exploited
- [CVE-2017-5753](https://www.precursorintelligence.com/what-is/cve-2017-5753): 94%, Medium (CVSS 5.6)
- [CVE-2009-3733](https://www.precursorintelligence.com/what-is/cve-2009-3733): 83%, Medium (CVSS 5.0)
- [CVE-2020-3992](https://www.precursorintelligence.com/what-is/cve-2020-3992): 83%, Critical (CVSS 9.8), known exploited
- [CVE-2023-29552](https://www.precursorintelligence.com/what-is/cve-2023-29552): 64%, High (CVSS 7.5), known exploited
- [CVE-2021-21974](https://www.precursorintelligence.com/what-is/cve-2021-21974): 45%, High (CVSS 8.8)
- [CVE-2010-0211](https://www.precursorintelligence.com/what-is/cve-2010-0211): 28%, Critical (CVSS 9.8)
- [CVE-2024-37085](https://www.precursorintelligence.com/what-is/cve-2024-37085): 27%, Medium (CVSS 6.8), known exploited
- [CVE-2016-5330](https://www.precursorintelligence.com/what-is/cve-2016-5330): 18%, High (CVSS 7.8)

## Questions

### How many vulnerabilities does ESXi have?

We track 138 published vulnerabilities listed under the name ESXi, across 20 versions. The most recent ESXi flaw added to the known-exploited list is CVE-2025-22224, on 4 March 2025.

### Which ESXi vulnerabilities are being exploited?

8 are on the list of flaws known to be exploited. The most recently added are CVE-2025-22224, CVE-2025-22226 and CVE-2025-22225.

### Which versions of ESXi do the exploited flaws affect?

Each flaw names its own versions, usually as ranges. The newest, CVE-2025-22224, affects 7.0-beta, 7.0, 7.0-update_1a, 7.0-update_1b and more. The versions for every exploited flaw are listed on this page.

### How do I get alerts for ESXi?

Create a Precursor Intelligence account and track ESXi. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

## Running ESXi?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact