Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-41703

No fix known EPSS <1%CVSS 7.6

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condition of the host process. On Workstation and Fusion, the impact of this vulnerability is restricted to information disclosure.

Published 2026-07-30 · CVE record · OSV

Products: vmware cloud_foundation, VMware vSphere Foundation, VMware ESX, VMware Workstation, VMware Fusion, VMware Telco Cloud Platform