CVE-2026-47876CWE-787

VMXNET3 out-of-bounds write vulnerability

Critical · published July 30, 2026

CVSS v3.1
9.3
EPSS
0%
Percentile
8.4
In the wild
Unconfirmed
What it is

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00192 · 8.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-07-30T12:31Z
EPSS history
Timeline
  • 30 JUL 12:31Z
    VMXNET3 out-of-bounds write vulnerability
    cvelistv5