CVE-2026-47876

VMXNET3 out-of-bounds write vulnerability

State: Published
Severity: 9.3 Critical
Published: Jul 30, 2026
Updated: Jul 30, 2026
Reserved: May 20, 2026

Description

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.

Scores

CVSS	Score	Vector	Source
3.1	9.3 Critical	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	vmware

Weaknesses

CWE-787 Out-of-bounds write

Affected Products

Product	Versions
Cloud FoundationVMware	9.1.x.xAffected 9.0.x.xAffected 5.xAffected
vSphere FoundationVMware	9.1.x.xAffected 9.0.x.xAffected
ESXVMware	9.1.x.x to before ESXi-9.1.0.0200-25557999Affected 9.0.x.x to before ESXi-9.0.2.0100-25595025Affected 8.0 to before ESXi80U3k-25595708Affected
Telco Cloud PlatformVMware	5.1.xAffected 5.0.xAffected

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.