Vmware released security updates to address critical security vulnerabilities (CVE-2021-39144, CVE-2022-31678) in VMware Cloud Foundation product. A malicious actor could exploit some these vulnerabilities to trigger denial of service condition, elevation of privilege and remote code execution on affected system. VMware has confirmed that exploit code for CVE-2021-39144 is publicly available.

More information on vulnerabilities and updates can be found in Vmware security advisory - VMSA-2022-0027.