ZDI-26-188 HIGH 8.2 Published Mar 16, 2026

VMware ESXi VMCI Integer Underflow Local Privilege Escalation Vulnerability

VMware

VMware ESXi is vulnerable to a local privilege escalation attack (CVE-2025-41237) rated as HIGH severity with a CVSS score of 8.2, requiring attackers to already have high-privileged code execution on a guest system. Successful exploitation allows attackers to escalate their privileges further on the affected ESXi installation. Security teams should prioritize patching VMware ESXi systems and restrict code execution capabilities on guest systems to limit the attack surface.

Related CVE

CVE-2025-41237

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy