Integer Overflow Vulnerability in VMware ESXi, Workstation, and Fusion Products

CVE-2025-41236

What is CVE-2025-41236?

VMware ESXi, Workstation, and Fusion have an integer overflow vulnerability that could be exploited by a malicious actor, given local administrative privileges on a virtual machine utilizing the VMXNET3 virtual network adapter. This flaw enables the potential execution of code on the host system, highlighting the importance of securing virtual environments against such threats. It is important to note that non-VMXNET3 virtual adapters are not impacted by this issue, making it crucial for administrators to assess their network configurations to mitigate the associated risks.

References