ZDI-26-190
HIGH 8.2
Published
Mar 16, 2026
VMware Workstation PVSCSI Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
VMware
CVE-2025-41238 is a privilege escalation vulnerability in VMware Workstation with a high severity rating of 8.2 that allows local attackers to gain elevated system privileges on affected guest systems. An attacker must already have the ability to execute high-privileged code on the target system to exploit this flaw. Security teams should apply VMware's security patches immediately for Workstation installations and restrict privileged code execution on guest systems where possible.