« Volver al listado

CVE-2025-41239

Estado: AplazadaAlta (7.1)—

VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to leak memory from processes communicating with vSockets.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

AV:L sin UI requiere acceso local previo (T1068). Fuga de memoria en vSockets (CWE-908) permite leer datos sensibles de procesos en ejecución (T1552.007, memoria; T1005, datos locales).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

User Account ManagementThreat Intelligence ProgramPrivileged Account ManagementNetwork SegmentationLimit Access to Resource Over NetworkExecution Prevention

Tecnologías afectadas (4)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Vmware — EsxiAIVmware — FusionAIVmware — Vmware ToolsAIVmware — WorkstationAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-41239",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-41239",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-07-15T18:51:16.482481Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@vmware.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4,
        "exploitabilityScore": 2.5
      }
    ]
  },
  "affected": [
    {
      "source": "security@vmware.com",
      "affectedData": [
        {
          "vendor": "VMware",
          "product": "ESXi",
          "versions": [
            {
              "status": "affected",
              "version": "8.0",
              "lessThan": "ESXi80U3f-24784735",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "8.0",
              "lessThan": "ESXi80U2e-24789317",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "7.0",
              "lessThan": "ESXi70U3w-24784741",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "Cloud Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "5.x, 4.5.x"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "Workstation",
          "versions": [
            {
              "status": "affected",
              "version": "17.x",
              "lessThan": "17.6.4",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "Fusion",
          "versions": [
            {
              "status": "affected",
              "version": "13.x",
              "lessThan": "13.6.4",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "Telco Cloud Platform",
          "versions": [
            {
              "status": "affected",
              "version": "5.x, 4.x, 3.x, 2.x"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "Telco Cloud Infrastructure",
          "versions": [
            {
              "status": "affected",
              "version": "3.x, 2.x"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "Tools",
          "versions": [
            {
              "status": "affected",
              "version": "13.x.x",
              "lessThan": "13.0.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "12.x.x, 11.x.x,",
              "lessThan": "12.5.3",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Windows"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-07-15T19:15:22.557",
  "references": [
    {
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35877",
      "source": "security@vmware.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@vmware.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-908"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to leak memory from processes communicating with vSockets."
    },
    {
      "lang": "es",
      "value": "VMware ESXi, Workstation, Fusion y VMware Tools presentan una vulnerabilidad de divulgación de información debido al uso de memoria no inicializada en vSockets. Un agente malicioso con privilegios de administrador local en una máquina virtual podría aprovechar este problema para filtrar memoria de los procesos que se comunican con vSockets."
    }
  ],
  "lastModified": "2026-06-17T09:22:39.373",
  "sourceIdentifier": "security@vmware.com"
}