Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: VMware ESXi, Workstation 17.6.4, ESXi70U3w-24784741 and 2 more versions Clear all filters
TI-2025-27486 CVE-2025-41239 · GHSA-8p72-rxh7-qv97

vSockets information-disclosure vulnerability

Priority LOW 37

VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.03159 Published 2025-07-15 Fixed in ESXi80U3f-24784735, ESXi80U2e-24789317 +5 CWE-908
TI-2025-27485 CVE-2025-41238 · GHSA-x6g2-w5w8-r8xx

PVSCSI heap-overflow vulnerability

Priority MEDIUM 42

VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI) controller that leads to an out of-bounds write.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00464 Published 2025-07-15 Fixed in ESXi80U3f-24784735, ESXi80U2e-24789317 +3 CWE-787
TI-2025-27484 CVE-2025-41237 · GHSA-6hwj-h56x-jhh3

VMCI integer-underflow vulnerability

Priority MEDIUM 42

VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI (Virtual Machine Communication Interface) that leads to an out-of-bounds write.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00464 Published 2025-07-15 Fixed in ESXi80U3f-24784735, ESXi80U2e-24789317 +3 CWE-787
TI-2025-27483 CVE-2025-41236 · GHSA-vvjv-89cj-78fr

VMXNET3 integer-overflow vulnerability

Priority MEDIUM 47

VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.02631 Published 2025-07-15 Fixed in ESXi80U3f-24784735, ESXi80U2e-24789317 +2 CWE-787