Information Disclosure Vulnerability in VMware ESXi and Workstation Products

CVE-2025-41239

What is CVE-2025-41239?

VMware ESXi, Workstation, Fusion, and VMware Tools are affected by an information disclosure vulnerability stemming from the usage of uninitialized memory in vSockets. This flaw allows a malicious actor with local administrative privileges on a virtual machine to potentially exploit the vulnerability, leading to the leakage of sensitive memory contents from processes interacting with vSockets. Users are advised to remain vigilant and apply necessary updates to mitigate risks associated with this vulnerability.

References