CVE-2026-47876
CriticalCVSS 9.3Summary
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host.
Risk Assessment
The risk is the potential for privilege escalation from a virtual machine to the host, which could lead to full compromise of the virtualization environment.
Recommendation
It is recommended to immediately update VMware ESX to a patched version and minimize the use of VMXNET3 adapters where possible.
Original NVD description (English source)
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.