Race Conditions

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privilege…CVE-2025-22224VMware · CVSS 9.3 · 1.6% likelycovered by CyberSIXT

   CWE-367

2. Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security con…CVE-2011-2731Vmware · 1.3% likely

   CWE-362

3. VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled. A malicious actor with access to settingsd, may exploit…CVE-2021-22043Vmware · 1.1% likely

   CWE-367

4. VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 1…CVE-2019-5519VMware · 1.0% likely

   CWE-367

5. VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an out-…CVE-2020-3982Vmware · 0.8% likely

   CWE-367

6. VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 1…CVE-2020-3966VMware · 0.4% likely

   CWE-362

7. VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may resu…CVE-2015-5191VMware · 0.3% likely

   CWE-362

8. The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed. This vulnera…CVE-2020-3941VMware · 0.3% likely

   CWE-362

9. Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware…CVE-2010-4295Vmware · 0.3% likely

   CWE-362

10. Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3…CVE-2011-1787Vmware · 0.2% likely

    CWE-362

11. VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerabi…CVE-2020-3957VMware · 0.2% likely

    CWE-367

12. TOCTOU local privilege escalation vulnerabilityCVE-2026-41702VMware · CVSS 7.8 · 0.2% likelycovered by CyberSIXT

    CWE-367

13. VMware Fusion TOCTOU local privilege escalation vulnerabilityCVE-2023-34046VMware · CVSS 6.7 · 0.1% likely

    CWE-367

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.