CVE-2025-62624CWE-122

CVE-2025-62624

published May 13, 2026

CVSS

8.8

EPSS

Percentile

1.1

In the wild

Unconfirmed

What it is

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

The record

Technical detail

CVSS: 8.8 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00107 · 1.1th percentile
Weakness: CWE-122 · Heap-based Buffer Overflow
Published: 2026-05-13T08:17Z

References (1)

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-2001.html · [email protected]

EPSS history

Timeline

13 MAY 02:58Z
A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in…
cvelistv5