VMware ESXi and Workstation Vulnerabilities Allow Host-Level Code Execution

VMware ESXi and Workstation Vulnerabilities Allow Host-Level Code Execution Broadcom disclosed four critical vulnerabilities in VMware’s virtualization suite on July 15, 2025, enabling attackers to escape virtual machines and execute code directly on host systems. The flaws, discovered through the Pwn2Own competition, affect ESXi, Workstation, Fusion, and VMware Tools across enterprise anddesktop environments. Vulnerability Overview The most severe vulnerability, CVE-2025-41236, resides in the V...

Save to Folder

Choose a folder to save this article: