CVE-2025-41226

MEDIUM EPSS 13.2%

Published May 20, 20251y ago · Modified Jun 17, 20262w ago

6.8 CVSS 3.1

Medium

Published May 20, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor with guest operation privileges on a VM, who is already authenticated through vCenter Server or ESXi may trigger this issue to create a denial-of-service condition of guest VMs with VMware Tools running and guest operations enabled.

CVSS Details

Base Score

6.8

Exploitability

2.3

Impact

4.0

Vector string

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Attack Vector Adjacent

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Changed

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

13.2% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-400 Uncontrolled Resource Consumption Resource Mgmt

References 1

support.broadcom.com https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.