Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-41227

Denial-of-Service Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the host process leading to a denial-of-service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware ESXi

Default version status: unaffected

  • 8.0 to < ESXi80U3se-24659227affected
  • 7.0 to < ESXi70U3sv-24723868affected

VMware Cloud Foundation

Default version status: unaffected

  • 5.x, 4.5.xaffected

VMware Telco Cloud Platform

Default version status: unaffected

  • 5.x, 4.x, 3.x, 2.xaffected

VMware Telco Cloud Infrastructure

Default version status: unaffected

  • 3.x, 2.xaffected

VMware Workstation

Default version status: unaffected

  • 17.x to < 17.6.3affected

VMware Fusion

Default version status: unaffected

  • 13.x to < 13.6.3affected

References