vulnerability

VMware VMware Tools: CVE-2025-41239: vSockets information-disclosure vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:C/I:N/A:N)

Published

Jul 15, 2025

Added

Aug 8, 2025

Modified

Apr 15, 2026

Description

VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. Broadcom has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.1.

Solution

vmware-tools-upgrade-latest

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35877
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-21539
CVE-2025-41239
https://attackerkb.com/topics/CVE-2025-41239
CWE-908
EUVD-EUVD-2025-21539

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report