Denial of Service Vulnerability in VMware ESXi, Workstation, and Fusion

CVE-2025-41227

What is CVE-2025-41227?

VMware ESXi, Workstation, and Fusion are affected by a denial-of-service vulnerability resulting from specific guest options. An attacker with non-administrative privileges in a guest OS could potentially exploit this vulnerability, leading to memory exhaustion in the host process. This could disrupt service availability, allowing unauthorized users to impact system stability.

References