PT-2025-29587 · Vmware · Vmware Fusion+3

Published

2025-07-15

·

Updated

2025-09-14

·

CVE-2025-41239

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions VMware ESXi VMware Workstation VMware Fusion VMware Tools
Description The software contains an information disclosure issue due to the use of uninitialized memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to leak memory from processes communicating with vSockets.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

BDU:2025-08914
CVE-2025-41239
ZDI-25-611

Affected Products

Vmware Esxi
Vmware Fusion
Vmware Tools
Vmware Workstation