CVE-2025-41226 — Guest Operations Denial-of-Service Vulnerability

Description (CNA)

VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor with guest operation privileges on a VM, who is already authenticated through vCenter Server or ESXi may trigger this issue to create a denial-of-service condition of guest VMs with VMware Tools running and guest operations enabled.

Affected (CNA)

Vendor / product	Versions
VMware / ESXi	affected 8.0 before ESXi80U3se-24659227; affected 7.0 before ESXi70U3sv-24723868
VMware / Cloud Foundation	affected 5.x, 4.5.x
VMware / Telco Cloud Platform	affected 5.x, 4.x, 3.x, 2.x
VMware / Telco Cloud Infrastructure	affected 3.x, 2.x

CWE

CWE-400

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.