CVE-2026-417037.6HighCWE-125
Out-of-bounds read vulnerability
VMware · Cloud Foundation
Not in CISA KEVVendor fix available
0.4%probability of exploitation in the next 30 days
37th percentile
050100
Higher than 37% of scored CVEs
7.6HighCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condition of the host process. On Workstation and Fusion, the impact of this vulnerability is restricted to information disclosure.
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: SecurityWeek, 29 Jul.
Quiet for 13 weekslast report 29 Jul2 articles2 outlets
- Wed 29 Jul, 11:51 UTC. SecurityWeek, first report. Broadcom Warns of VMware Flaws Allowing Host Code Execution.
- Wed 29 Jul, 14:07 UTC. Security Affairs, its first report on the story. Broadcom patches critical VMware flaws, including admin VM escape.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 29 Jul 11:51 | SecurityWeek | Broadcom Warns of VMware Flaws Allowing Host Code Execution |
| 29 Jul 14:07 | Security Affairs | Broadcom patches critical VMware flaws, including admin VM escape |
- Broadcom patches critical VMware flaws, including admin VM escapeSecurity Affairs · mentions it in passing
- Broadcom Warns of VMware Flaws Allowing Host Code ExecutionSecurityWeek · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.