CVE-2026-47876criticalCWE-787

CVE-2026-47876: falha crítica em VMware ESX

VMXNET3 out-of-bounds write vulnerability

Publicada em

Seguir esta CVE+ Monitorar VMware Cloud Foundation+ Monitorar Telco Cloud Platform

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Ela tem alerta oficial do governo brasileiro.

ssvc Trackcvss 9.3epss 0.2%
Alerta oficial no Brasil

O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.

Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
VMware · Cloud FoundationVMware · ESXVMware · Telco Cloud PlatformVMware · vSphere Foundation
CVEs relacionadas — VMware ESX

No mesmo produto, das mais perigosas para as menos.

CVE-2026-22719HIGHVMware Aria Operations command injection vulnerabilityEPSS 18.3%KEVCVE-2026-59310CRITICALvCenter directory-traversal vulnerabilityEPSS 2.6%KEVCVE-2025-22224CRITICALCVE-2025-22224EPSS 1.6%KEVCVE-2026-41709LOWESX insufficient logging vulnerabilityEPSS 0.7%KEVCVE-2025-41239HIGHvSockets information-disclosure vulnerabilityEPSS 3.2%CVE-2025-41236CRITICALVMXNET3 integer-overflow vulnerabilityEPSS 2.6%