PT-2026-40526 · Vmware · Vmware Esxi

Published 2026-05-12 · Updated 2026-05-13 · CVE-2025-62627

Positive Technologies (AI Summary)

CVSS v4.0

7.2

High

Base vector

AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H

Name of the Vulnerable Software and Affected Versions VMWare ESXi (affected versions not specified)

Description An untrusted pointer dereference in the ionic cloud driver allows an attacker with an unprivileged VM to read kernel memory or memory from co-located guest VMs. This issue could lead to a loss of confidentiality or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Pointer Dereference

Weakness Enumeration

CWE-822

Related Identifiers

CVE-2025-62627

Affected Products

Vmware Esxi

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-62627 · Security Note
• https://reddit.com/r/SecOpsDaily/comments/1tbhtk3/amd_ionic_driver_vulnerabilities_affecting_vmware · Reddit Post
• https://twitter.com/orinimron123/status/2054665614573162558 · Twitter Post
• https://t.me/CVEtracker/53596 · Telegram Post
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-2001.html · Note