CVE-2026-47876: VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network ad
Critical vulnerability — CVSS 9.3
What to do
- Critical severity — schedule an urgent patch.
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.
CVE · detail
- CVE-2026-47876EPSS 0.36%NVD ↗