CVE-2026-41703

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condition of the host process. On Workstation and Fusion, the impact of this vulnerability is restricted to information disclosure.

Score

CVSS 3.1 7.6 High

Status

Awaiting Analysis - security@vmware.com

Published

2026-07-30

Last modified

2026-07-30

Weaknesses

CWE-125

Affected products

• Cloud Foundation (Vmware)
• Esx (Vmware)
• Fusion (Vmware)
• Telco Cloud Platform (Vmware)
• Vsphere Foundation (Vmware)
• Workstation (Vmware)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017