CVE-2025-41236

🗓️ 15 Jul 2025 18:34:12Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 89 Views

VMware VMXNET3 integer-overflow vulnerability allows local code execution on the host.

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2025-41236	15 Jul 202518:34	–	attackerkb
BDU FSTEC	The vulnerability in the virtual network adapter VMXNET3 of VMware ESXi, Workstation, Fusion, and Cloud Foundation exists due to a write-off outside the buffer, allowing an attacker to execute arbitrary code.	16 Jul 202500:00	–	bdu_fstec
Circl	CVE-2025-41236	15 Jul 202518:53	–	circl
CNNVD	VMware多款产品缓冲区错误漏洞	15 Jul 202500:00	–	cnnvd
CNVD	Integer Overflow Vulnerability in Multiple VMWare Products	30 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-41236 VMXNET3 integer-overflow vulnerability	15 Jul 202518:34	–	cvelist
EUVD	EUVD-2025-21544	3 Oct 202520:07	–	euvd
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in VMware ESXi affect IBM Cloud Pak System	30 Jan 202616:53	–	ibm
NVD	CVE-2025-41236	15 Jul 202519:15	–	nvd
Positive Technologies	PT-2025-29584	15 Jul 202500:00	–	ptsecurity

[
  {
    "defaultStatus": "unaffected",
    "product": "ESXi",
    "vendor": "VMware",
    "versions": [
      {
        "lessThan": "ESXi80U3f-24784735",
        "status": "affected",
        "version": "8.0",
        "versionType": "custom"
      },
      {
        "lessThan": "ESXi80U2e-24789317",
        "status": "affected",
        "version": "8.0",
        "versionType": "custom"
      },
      {
        "lessThan": "ESXi70U3w-24784741",
        "status": "affected",
        "version": "7.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Cloud Foundation",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "5.x, 4.5.x"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Workstation",
    "vendor": "VMware",
    "versions": [
      {
        "lessThan": "17.6.4",
        "status": "affected",
        "version": "17.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Fusion",
    "vendor": "VMware",
    "versions": [
      {
        "lessThanOrEqual": "13.6.4",
        "status": "affected",
        "version": "13.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Telco Cloud Platform",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "5.x, 4.x, 3.x, 2.x"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Telco Cloud Infrastructure",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "3.x, 2.x"
      }
    ]
  }
]

Source	Link
support	www.support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35877

17 Jun 2026 09:22Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.19.3

EPSS0.02107

SSVC

CWE-787