CVE-2026-47876 VMXNET3 out-of-bounds write vulnerability

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are no...

CVE-2026-47876 VMXNET3 out-of-bounds write vulnerability

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are no...

CVE-2026-47876

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are no...

CVE-2026-47876

CVE-2026-47876 is an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter of VMware ESX/ESXi. A local administrator inside a VM using VMXNET3 can potentially execute code on the ESX host; non-VMXNET3 adapters are not affected. Connected documents confirm patches/updates have b...

CVE-2026-47876: Out-of-bounds Write

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are no...

PT-2026-65833

Name of the Vulnerable Software and Affected Versions VMware vCenter versions prior to 9.1.0.0300 VMware vCenter versions prior to 9.0.2.0100 VMware vCenter versions prior to 8.0 U3k VMware vCenter versions prior to 8.0 U2f Description VMware vCenter contains a directory traversal issue in the...

(Pwn2Own) VMware ESXi VMXNET3 espQueueMask Out-Of-Bounds Write Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware ESXi. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the implementatio...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: vmxnet3: Fixed the missing reserved tailroom. Use rbi-len instead of rcd-len for non-data-carrying packets. Issues found: XDPWARN: xdpupdateframefrombuffline:278: Driver BUG: missing reserved tailroom WARNING: CPU: 0 PID: 0 at...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Packet corruption occurred in vmxnet3xdpxmitframe. Andrew and Nikolay reported connectivity issues with Cilium’s service load-balancing in the case of vmxnet3. If a BPF program for native XDP adds an encapsulation header...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the vmxnet3xdpxmitframe function in Linux operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

(Pwn2Own) VMware ESXi VMXNET3 Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware ESXi. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the implementatio...

Linux kernel Network Device Driver Heap Buffer Overflow DoS

The vulnerability of the vmxnet3processxdp function in the drivers/net/vmxnet3/vmxnet3xdp.c file of the Linux kernel device driver framework is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27026)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27026 advisory. - In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix missing reserved...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: The unregister xdp rxq info operation is not performed in the reset path. In the vmxnet3resetwork code path, the unregister xdp rxq info operation is not executed because the vmxnet3rqdestroy function is not called in th...

MiracleLinux 9 : kernel-5.14.0-570.25.1.el9_6 (AXSA:2025-10697:52)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10697:52 advisory. kernel: ipv6: mcast: extend RCU protection in igmp6send CVE-2025-21759 kernel: ovl: fix UAF in ovldentryupdatereval by moving dput in ovllinkup...

AlmaLinux 10 : kernel (ALSA-2025:10371)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:10371 advisory. kernel: ipv6: mcast: extend RCU protection in igmp6send CVE-2025-21759 kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes...

EUVD-2016-7721

Malware in sbrugna...

EUVD-2015-8446

Malware in sbrugna...

RockyLinux 10 : kernel (RLSA-2025:10371)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10371 advisory. kernel: ipv6: mcast: extend RCU protection in igmp6send CVE-2025-21759 kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes...

RLSA-2025:10379 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: mcast: extend RCU protection in igmp6send CVE-2025-21759 kernel: ovl: fix UAF in ovldentryupdatereval by moving dput in ovllinkup CVE-2025-21887 kernel: net: atm: fix use after free...