CVE-2025-41236criticalCWE-787

CVE-2025-41236: falha crítica em VMware ESXi

VMXNET3 integer-overflow vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Workstation+ Monitorar VMware Cloud Foundation

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 2.6%
VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
VMware · Cloud FoundationVMware · ESXiVMware · FusionVMware · Telco Cloud InfrastructureVMware · Telco Cloud PlatformVMware · Workstation
CVEs relacionadas — VMware ESXi

No mesmo produto, das mais perigosas para as menos.

CVE-2026-59310CRITICALvCenter directory-traversal vulnerabilityEPSS 61.7%KEVCVE-2025-22224CRITICALCVE-2025-22224EPSS 1.6%KEVCVE-2026-41709LOWESX insufficient logging vulnerabilityEPSS 0.7%KEVCVE-2017-4933—CVE-2017-4933EPSS 3.6%CVE-2025-41239HIGHvSockets information-disclosure vulnerabilityEPSS 3.2%CVE-2017-4941—CVE-2017-4941EPSS 3.2%