Description
VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to leak memory from processes communicating with vSockets.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | ESXi | 8.0 – < ESXi80U3f-24784735, 8.0 – < ESXi80U2e-24789317, 7.0 – < ESXi70U3w-24784741 | ESXi80U3f-24784735 |
| VMware | Cloud Foundation | 5.x, 4.5.x | — |
| VMware | Workstation | 17.x – < 17.6.4 | 17.6.4 |
| VMware | Fusion | 13.x – < 13.6.4 | 13.6.4 |
| VMware | Telco Cloud Platform | 5.x, 4.x, 3.x, 2.x | — |
| VMware | Telco Cloud Infrastructure | 3.x, 2.x | — |
| VMware | Tools | 13.x.x – < 13.0.1.0, 12.x.x, 11.x.x, – < 12.5.3 | 13.0.1.0 |
Advisories 2
- WID-SEC-2025-1576 VMware Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 16, 2026
- ICSA-25-212-02 Rockwell Automation Lifecycle Services with VMware CISA ICS & IT advisories · Jul 31, 2025