Description
VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | ESXi | 8.0 – < ESXi80U3f-24784735, 8.0 – < ESXi80U2e-24789317, 7.0 – < ESXi70U3w-24784741 | ESXi80U3f-24784735 |
| VMware | Cloud Foundation | 5.x, 4.5.x | — |
| VMware | Workstation | 17.x – < 17.6.4 | 17.6.4 |
| VMware | Fusion | 13.x – ≤ 13.6.4 | — |
| VMware | Telco Cloud Platform | 5.x, 4.x, 3.x, 2.x | — |
| VMware | Telco Cloud Infrastructure | 3.x, 2.x | — |
Advisories 2
- WID-SEC-2025-1576 VMware Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 16, 2026
- ICSA-25-212-02 Rockwell Automation Lifecycle Services with VMware CISA ICS & IT advisories · Jul 31, 2025