CVE-2026-41703

HighCVSS 7.6/10Last modified Jul 30, 2026

Description

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condition of the host process. On Workstation and Fusion, the impact of this vulnerability is restricted to information disclosure.

Metrics

CVSS 3.1 7.6/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
VMwareCloud Foundation9.1.x.x; 9.0.x.x; >= 5.x, < 5.2.3
VMwarevSphere Foundation9.1.x.x; 9.0.x.x
VMwareESX>= 9.1.x.x, < ESXi-9.1.0.0-25370933; >= 9.0.x.x, < ESXi-9.0.2.0100-25595025; >= 8.0, < ESXi80U3i-25205845
VMwareWorkstation>= 25H2, < 26H1
VMwareFusion>= 25H2, < 26H1
VMwareTelco Cloud Platform5.1.x; 5.0.x

References

Timeline

Published
Jul 30, 2026
Last modified
Jul 30, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-417045.0AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads CVE-2026-417058.6Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs. SprinCVE-2026-417066.1Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that usersCVE-2026-417077.4Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory containsCVE-2026-417087.5In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. TheCVE-2026-417092.7VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations CVE-2026-41716.3A security vulnerability has been detected in CodeGenieApp serverless-express up to 4.17.1. Affected by this issue is some unknown functionaCVE-2026-417105.9An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retCVE-2026-417115.9Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsinCVE-2026-417127.5Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data expoCVE-2026-417138.2A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. ApplicatioCVE-2026-417144.0Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also calling setUseSSL(tru
CVE-2026-41703: High severity, CVSS 7.6 | Vulnix