CVE-2026-478769.3CriticalCWE-787
VMXNET3 out-of-bounds write vulnerability
VMware · Cloud Foundation
Not in CISA KEVVendor fix available
0.2%probability of exploitation in the next 30 days
8th percentile
050100
Higher than 8% of scored CVEs
9.3CriticalCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: SecurityWeek, 29 Jul.
Quiet for 13 weekslast report 29 Jul2 articles2 outlets
- Wed 29 Jul, 11:51 UTC. SecurityWeek, first report. Broadcom Warns of VMware Flaws Allowing Host Code Execution.
- Wed 29 Jul, 14:07 UTC. Security Affairs, its first report on the story. Broadcom patches critical VMware flaws, including admin VM escape.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 29 Jul 11:51 | SecurityWeek | Broadcom Warns of VMware Flaws Allowing Host Code Execution |
| 29 Jul 14:07 | Security Affairs | Broadcom patches critical VMware flaws, including admin VM escape |
- Broadcom Warns of VMware Flaws Allowing Host Code ExecutionSecurityWeek · first in our coverage
New articles also arrive in the RSS feed.