Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-41227

No fix known EPSS <1%CVSS 5.5

VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the host process leading to a denial-of-service condition.

Published 2025-05-20 · CVE record · OSV

Products: VMware ESXi, vmware cloud_foundation, VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure, VMware Workstation, VMware Fusion