AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

VMwareCVE-2026-41703

VMware Cloud Foundation: out-of-bounds read

VMware

CVE-2026-41703 · Published Jul 30, 2026

High7.6
Fix: upgrade to 5.2.3 or later (5 fixed versions below)
VMware advisory

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condition of the host process. On Workstation and Fusion, the impact of this vulnerability is restricted to information disclosure.

Affected versions

PackageAffectedFixed in
Cloud Foundation
Product
<= 9.1.x.xNo fix yet
<= 9.0.x.xNo fix yet
>= 5.x, < 5.2.35.2.3
ESX
Product
>= 9.1.x.x, < ESXi-9.1.0.0-25370933ESXi-9.1.0.0-25370933
>= 9.0.x.x, < ESXi-9.0.2.0100-25595025ESXi-9.0.2.0100-25595025
>= 8.0, < ESXi80U3i-25205845ESXi80U3i-25205845
Fusion
Product
>= 25H2, < 26H126H1
Telco Cloud Platform
Product
<= 5.1.xNo fix yet
<= 5.0.xNo fix yet
Workstation
Product
>= 25H2, < 26H126H1
vSphere Foundation
Product
<= 9.1.x.xNo fix yet
<= 9.0.x.xNo fix yet
Details and references

More VMware advisories

All VMware