ZDI-26-188
HIGH 8.2
Published
Mar 16, 2026
VMware ESXi VMCI Integer Underflow Local Privilege Escalation Vulnerability
VMware
VMware ESXi is vulnerable to a local privilege escalation attack (CVE-2025-41237) rated as HIGH severity with a CVSS score of 8.2, requiring attackers to already have high-privileged code execution on a guest system. Successful exploitation allows attackers to escalate their privileges further on the affected ESXi installation. Security teams should prioritize patching VMware ESXi systems and restrict code execution capabilities on guest systems to limit the attack surface.