CVE-2026-47876 VMXNET3 out-of-bounds write vulnerability
CriticalCVSS 9.3
EPSS 0.19%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Cloud Foundation | = 9.1.x.x | No fix listed |
| VMware Cloud Foundation | = 9.0.x.x | No fix listed |
| VMware Cloud Foundation | = 5.x | No fix listed |
| VMware vSphere Foundation | = 9.1.x.x | No fix listed |
| VMware vSphere Foundation | = 9.0.x.x | No fix listed |
| VMware ESX | >= 9.1.x.x, < ESXi-9.1.0.0200-25557999 | ESXi-9.1.0.0200-25557999 |
| VMware ESX | >= 9.0.x.x, < ESXi-9.0.2.0100-25595025 | ESXi-9.0.2.0100-25595025 |
| VMware ESX | >= 8.0, < ESXi80U3k-25595708 | ESXi80U3k-25595708 |
| VMware Telco Cloud Platform | = 5.1.x | No fix listed |
| VMware Telco Cloud Platform | = 5.0.x | No fix listed |