9.3
Critical
CVE-2026-47876 VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor…
Description
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Foundation | 9.1.x.x | No fix stated |
| Cloud Foundation | 9.0.x.x | No fix stated |
| Cloud Foundation | 5.x | No fix stated |
| vSphere Foundation | 9.1.x.x | No fix stated |
| vSphere Foundation | 9.0.x.x | No fix stated |
| ESX 9.1 | 9.1.x.x → latest | No fix stated |
| ESX 9.0 | 9.0.x.x → latest | No fix stated |
| ESX 8.0 | 8.0 → latest | No fix stated |
| Telco Cloud Platform | 5.1.x | No fix stated |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| Telco Cloud Platform | 5.0.x | No fix stated |
Other CVEs of Cloud Foundation
The 17 CVEs of Cloud Foundation →
CVE-2026-41709
Broadcom VMWare ESX Insufficient Logging Vulnerability
2.7
Low
CVE-2026-41703
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability
7.6
High
CVE-2026-59309
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with…
9.8
Critical
CVE-2026-59310
Broadcom VMware vCenter Path Traversal Vulnerability
9.8
Critical