Vulnerabilities > Vmware > Photon OS

DATE CVE VULNERABILITY TITLE RISK
2023-12-13 CVE-2022-22942 Use After Free vulnerability in VMWare Photon OS 3.0/4.0
The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer.
local
low complexity
vmware CWE-416
7.8
2022-04-11 CVE-2021-22055 Injection vulnerability in VMWare Photon OS
The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter.
network
low complexity
vmware CWE-74
5.3
2020-07-30 CVE-2020-10713 Classic Buffer Overflow vulnerability in multiple products
A flaw was found in grub2, prior to version 2.06.
local
low complexity
gnu debian opensuse vmware CWE-120
8.2
2016-08-31 CVE-2016-5333 Use of Hard-coded Credentials vulnerability in VMWare Photon OS 1.0
VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.
network
low complexity
vmware CWE-798
critical
9.8