vulnerability

VMware Workstation: Vulnerability (VMSA-2025-0013) (CVE-2025-41236)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

Published

Jul 15, 2025

Added

Jul 23, 2025

Modified

Mar 30, 2026

Description

VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.

Solution

vmware-workstation-upgrade-17_6_4

References

CVE-2025-41236
https://attackerkb.com/topics/CVE-2025-41236
CWE-787
EUVD-EUVD-2025-21544
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-21544
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35877

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report