CVE-2025-41236

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
9.3CRITICAL
EPSS
0.0%
top 85.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Vmware EsxiVmware WorkstationVmware Fusion+3 more
Timeline
PublishedJul 15
Latest updateJul 17

Description

VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 2.5 | Impact: 6.0

Affected Packages6 packages

▶CVEListV5vmware/esxi8.0 — ESXi80U3f-24784735+2
▶CVEListV5vmware/workstation17.x — 17.6.4
▶CVEListV5vmware/fusion13.x — 13.6.4
▶CVEListV5vmware/cloud_foundation5.x, 4.5.x
▶CVEListV5vmware/telco_cloud_platform5.x, 4.x, 3.x, 2.x

🔴Vulnerability Details

2
CVEList
VMXNET3 integer-overflow vulnerability↗2025-07-15
▶
GHSA
GHSA-vvjv-89cj-78fr: VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter↗2025-07-15
▶

🕵️Threat Intelligence

1
Bleepingcomputer
VMware fixes four ESXi zero-day bugs exploited at Pwn2Own Berlin↗2025-07-17
▶
CVE-2025-41236 (CRITICAL CVSS 9.3) | VMware ESXi | cvebase.io