VMware ESXi and Workstation Vulnerabilities Let Attackers Execute Malicious Code on Host

Multiple severe vulnerabilities have been addressed affectingVMware ESXi, Workstation, Fusion, and Tools that could allow attackers to execute malicious code on host systems. The vulnerabilities, identified as CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, and CVE-2025-41239, carry CVSS scores ranging from 6.2 to 9.3, with three classified as critical severity. Security researchers discovered these flaws through the Pwn2Own competition, highlighting the serious nature of the threats facing virt...

Save to Folder

Choose a folder to save this article: