ZDI-26-190 HIGH 8.2 Published Mar 16, 2026

VMware Workstation PVSCSI Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

VMware

CVE-2025-41238 is a privilege escalation vulnerability in VMware Workstation with a high severity rating of 8.2 that allows local attackers to gain elevated system privileges on affected guest systems. An attacker must already have the ability to execute high-privileged code on the target system to exploit this flaw. Security teams should apply VMware's security patches immediately for Workstation installations and restrict privileged code execution on guest systems where possible.

Related CVE

CVE-2025-41238

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy