« Volver al listado

CVE-2025-41227

Estado: AplazadaMedia (5.5)—

VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the host process leading to a denial-of-service condition.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Vmware — EsxiAIVmware — FusionAIVmware — WorkstationAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-41227",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-41227",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-20T15:59:41.340433Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@vmware.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@vmware.com",
      "affectedData": [
        {
          "vendor": "VMware",
          "product": "ESXi",
          "versions": [
            {
              "status": "affected",
              "version": "8.0",
              "lessThan": "ESXi80U3se-24659227",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "7.0",
              "lessThan": "ESXi70U3sv-24723868",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "Cloud Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "5.x, 4.5.x"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "Telco Cloud Platform",
          "versions": [
            {
              "status": "affected",
              "version": "5.x, 4.x, 3.x, 2.x"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "Telco Cloud Infrastructure",
          "versions": [
            {
              "status": "affected",
              "version": "3.x, 2.x"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "Workstation",
          "versions": [
            {
              "status": "affected",
              "version": "17.x",
              "lessThan": "17.6.3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "Fusion",
          "versions": [
            {
              "status": "affected",
              "version": "13.x",
              "lessThan": "13.6.3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-05-20T15:16:07.827",
  "references": [
    {
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717",
      "source": "security@vmware.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@vmware.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the host process leading to a denial-of-service condition."
    },
    {
      "lang": "es",
      "value": "VMware ESXi, Workstation y Fusion presentan una vulnerabilidad de denegación de servicio debido a ciertas opciones de invitado. Un agente malicioso con privilegios no administrativos dentro de un sistema operativo invitado podría explotar este problema agotando la memoria del proceso del host, lo que provoca una condición de denegación de servicio."
    }
  ],
  "lastModified": "2026-06-17T09:22:38.070",
  "sourceIdentifier": "security@vmware.com"
}