CVE-2025-41227 — Denial-of-Service Vulnerability

Description (CNA)

VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the host process leading to a denial-of-service condition.

Affected (CNA)

Vendor / product	Versions
VMware / ESXi	affected 8.0 before ESXi80U3se-24659227; affected 7.0 before ESXi70U3sv-24723868
VMware / Cloud Foundation	affected 5.x, 4.5.x
VMware / Telco Cloud Platform	affected 5.x, 4.x, 3.x, 2.x
VMware / Telco Cloud Infrastructure	affected 3.x, 2.x
VMware / Workstation	affected 17.x before 17.6.3
VMware / Fusion	affected 13.x before 13.6.3

CWE

CWE-400

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.