5.5
Medium
CVE-2025-41227 VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious…
Description
VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the host process leading to a denial-of-service condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ESXi 8.0 | 8.0 → latest | No fix stated |
| ESXi 7.0 | 7.0 → latest | No fix stated |
| Cloud Foundation | Versions not published | |
| Telco Cloud Platform | Versions not published | |
| Telco Cloud Infrastructure | Versions not published | |
| Workstation 17 | 17.x → < 17.6.3 | 17.6.3 |
| Fusion 13 | 13.x → < 13.6.3 | 13.6.3 |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of ESXi
The 29 CVEs of ESXi →
CVE-2025-41239
VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage…
7.1
High
CVE-2025-41238
VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI)…
9.3
Critical
CVE-2025-41237
VMCI integer-underflow vulnerability
9.3
Critical
CVE-2025-41236
VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A…
9.3
Critical