PT-2026-7289 · Vmware+1 · Vmware Esxi+1

Published 2026-02-10 · Updated 2026-02-10 · CVE-2025-25058

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware ESXi versions prior to 2.2.2.0 (ESXi 8.0) VMware ESXi versions prior to 2.2.3.0 (ESXi 9.0)

Description An improper initialization issue exists in some ESXi kernel mode driver for the Intel Ethernet 800-Series. This may allow an information disclosure. A local, unprivileged software adversary with an authenticated user and a low complexity attack may enable data exposure. The potential vulnerability may impact the confidentiality of the vulnerable system.

Recommendations Update VMware ESXi to version 2.2.2.0 or later for ESXi 8.0. Update VMware ESXi to version 2.2.3.0 or later for ESXi 9.0.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2026-01835

CVE-2025-25058

Affected Products

Intel 800 Series Ethernet

Vmware Esxi

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-25058 · Security Note
• https://bdu.fstec.ru/vul/2026-01835 · Security Note
• https://twitter.com/CVEnew/status/2021279088351052204 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01408.html · Note