VMware ESX vulnerabilities

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A user with VM deployment privileges can trigger an out-of-bounds read, potentially leading to information disclosure or a Denial-of-Service (DoS) condition of the host process. On Workstation and Fusion, the impact is restricted to information disclosure.

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host.

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.