CVE-2026-41703

CVE Enrichment

CVSS: 7.6 HIGH
EPSS: 0.43%
EPSS Percentile: 37.26%
CISA KEV: Not listed

Description

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condition of the host process. On Workstation and Fusion, the impact of this vulnerability is restricted to information disclosure.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 30-Jul-2026 20:16
Last Modified: 30-Jul-2026 23:17
EPSS Date: 2026-10-25
CWE: CWE-125

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:H /
                            UI:N /
                            S:C /
                            C:H /
                            I:N /
                            A:L

References

[email protected]

Last enrichment sync: 26-Oct-2026 18:22
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (2)

CVE-2026-41703: An out-of-bounds read vulnerability in ESX, Workstation, and Fusion. Broadcom Patches Five VMware Flaws, Including VM Escape and Authentication Bypass
CVE-2026-41703 (CVSS score: 7.6) – An out-of-bounds read vulnerability in VMware ESX that a malicious actor with VM deployment privileges could trigger, potentially leading to information disclosure or a Broadcom Patches VMware Flaws That Could Enable Authentication Bypass and Code Execution

CVE (4)

Malware (1)

MITRE ATT&CK (2)

Vendors (2)

Products (11)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.