CVE-2022-31696

Published Dec 13, 2022 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-53116 VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
CPEs cpe:2.3:a:vmware:cloud_foundation:4.76:*:*:*:*:*:*:*
Weaknesses

Sources

Status
PUBLISHED
Assigner
vmware
Published
Updated
Apr 22, 2025, 3:51 PM
Reserved
May 25, 2022, 12:00 AM
Status
Modified
Published
Dec 13, 2022, 4:15 PM
Modified
Jun 17, 2026, 4:46 AM