Out-of-Bounds Read Vulnerability in VMware ESX, Workstation, and Fusion

CVE-2026-41703

What is CVE-2026-41703?

VMware ESX, Workstation, and Fusion are susceptible to an out-of-bounds read vulnerability. This flaw allows qualified malicious actors to exploit VM deployment privileges, potentially leading to confidential information being exposed or causing a Denial-of-Service (DoS) condition on the host process. In the context of Workstation and Fusion, the repercussions primarily include the risk of information disclosure.

News Articles

BleepingComputer

CVE-2026-41703

VMware fixes three critical flaws allowing auth bypass, VM escapes

Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host.

2 weeks ago

References