[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcBtFWqU9oTkBm-JIYVRW41Sk5Dq0KXfyEL2E6A3pNLM":3,"g5a-family:vmware\u002Ftelco_cloud_infrastructure":88,"g5a-ex:vmware\u002Ftelco_cloud_infrastructure@*":89},{"success":4,"data":5},true,{"product":6,"versions":22,"topVulnerabilitiesByEpss":27,"kevVulnerabilities":52,"seoMetadata":67,"meta":86},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":9,"kevCount":9,"lastCveUpdate":10,"versions":11,"description":21},"vmware","telco_cloud_infrastructure",4,"2025-09-29",[12,15,17,19],{"version":13,"cve_count":14,"kev_count":14,"has_kev":4},"2.2",3,{"version":16,"cve_count":14,"kev_count":14,"has_kev":4},"2.5",{"version":18,"cve_count":14,"kev_count":14,"has_kev":4},"2.7",{"version":20,"cve_count":14,"kev_count":14,"has_kev":4},"3.0","Telco Cloud Infrastructure by Vmware is a technology product with 4 tracked versions and 4 known security vulnerabilities including 4 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[23,24,25,26],{"version":13,"cve_count":14,"kev_count":14,"has_kev":4},{"version":16,"cve_count":14,"kev_count":14,"has_kev":4},{"version":18,"cve_count":14,"kev_count":14,"has_kev":4},{"version":20,"cve_count":14,"kev_count":14,"has_kev":4},[28,35,41,47],{"cveId":29,"description":30,"publishedDate":10,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":4,"epssScore":34},"CVE-2025-41244","VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.",7.8,"v3.1","High",0.08438,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":32,"severity":33,"isKev":4,"epssScore":40},"CVE-2025-22226","VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.","2025-03-04",7.1,0.01769,{"cveId":42,"description":43,"publishedDate":38,"cvssScore":44,"cvssVersion":32,"severity":45,"isKev":4,"epssScore":46},"CVE-2025-22224","VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.",9.3,"Critical",0.01561,{"cveId":48,"description":49,"publishedDate":38,"cvssScore":50,"cvssVersion":32,"severity":33,"isKev":4,"epssScore":51},"CVE-2025-22225","VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.",8.2,0.01016,[53,58,61,64],{"cveId":29,"description":30,"publishedDate":10,"cvssScore":31,"severity":33,"isKev":4,"epssScore":34,"cisaVulnName":54,"cisaDateAdded":55,"cisaShortDescription":56,"cisaRequiredAction":57},"Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","2025-10-30","Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":42,"description":43,"publishedDate":38,"cvssScore":44,"severity":45,"isKev":4,"epssScore":46,"cisaVulnName":59,"cisaDateAdded":38,"cisaShortDescription":60,"cisaRequiredAction":57},"VMware ESXi and Workstation TOCTOU Race Condition Vulnerability","VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.",{"cveId":48,"description":49,"publishedDate":38,"cvssScore":50,"severity":33,"isKev":4,"epssScore":51,"cisaVulnName":62,"cisaDateAdded":38,"cisaShortDescription":63,"cisaRequiredAction":57},"VMware ESXi Arbitrary Write Vulnerability","VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.",{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"severity":33,"isKev":4,"epssScore":40,"cisaVulnName":65,"cisaDateAdded":38,"cisaShortDescription":66,"cisaRequiredAction":57},"VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability","VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process.",{"title":68,"metaDescription":69,"keywords":70,"structuredData":71},"Telco Cloud Infrastructure by Vmware - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Telco Cloud Infrastructure by Vmware covering 4 versions with 4 tracked vulnerabilities including 1 critical and 3 high-severity issues and 4 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Telco Cloud Infrastructure vulnerabilities, Telco Cloud Infrastructure security, Telco Cloud Infrastructure CVE, Vmware Telco Cloud Infrastructure, Telco Cloud Infrastructure threat intelligence, Vmware security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Telco Cloud Infrastructure KEV, Telco Cloud Infrastructure exploited vulnerabilities",{"@context":72,"@type":73,"name":74,"description":69,"url":75,"manufacturer":76,"applicationCategory":80,"softwareVersion":81,"mainEntity":82},"https:\u002F\u002Fschema.org","SoftwareApplication","Telco Cloud Infrastructure","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fvmware\u002Ftelco_cloud_infrastructure",{"@type":77,"name":78,"url":79},"Organization","Vmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fvmware","Security Software","4 versions tracked",{"@type":83,"name":84,"description":85,"vulnerabilityCount":9,"dateModified":10},"SecurityVulnerability","Telco Cloud Infrastructure Security Vulnerabilities","Security vulnerabilities affecting Telco Cloud Infrastructure by Vmware",{"totalVersions":9,"totalVulnerabilities":9,"kevVulnerabilities":9,"lastUpdated":10,"generatedAt":87,"apiVersion":20},"2026-10-17T14:55:17.463Z",[],{"rows":90,"total":9,"capped":96,"failed":109},[91,97,101,105],{"cveId":29,"name":54,"severity":33,"cvss":31,"added":55,"epss":34,"published":92,"ranges":93,"checked":4,"hits":95,"covers":96},"2025-09-29T17:15:30.843",[94],"2.2 to 3.0",[],false,{"cveId":42,"name":59,"severity":45,"cvss":44,"added":38,"epss":46,"published":98,"ranges":99,"checked":4,"hits":100,"covers":96},"2025-03-04T12:15:33.687",[13,16,18,20],[],{"cveId":48,"name":62,"severity":33,"cvss":50,"added":38,"epss":51,"published":102,"ranges":103,"checked":4,"hits":104,"covers":96},"2025-03-04T12:15:33.84",[13,16,18,20],[],{"cveId":36,"name":65,"severity":33,"cvss":39,"added":38,"epss":40,"published":106,"ranges":107,"checked":4,"hits":108,"covers":96},"2025-03-04T12:15:33.973",[13,16,18,20],[],0]