low3.3
CVE-2022-31699
VMware ESXi contains a heap-overflow vulnerability.
Impact
VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Cloud Foundation | Versions 3.0, 3.0.1, 3.0.1.1, 3.5, 3.5.1, 3.7 |
| Vmware | Esxi | Versions 6.5, 6.7, 7.0 |