High Threat Security Alert (A25-07-12): Multiple Vulnerabilities in VMware Products

Description:

VMware has published a security advisory to address multiple vulnerabilities in VMware products. The details of patches can be found at:
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35877

Reports indicate that multiple vulnerabilities (CVE-2025-41236, CVE-2025-41237 and CVE-2025-41238) in VMware ESXi, Fusion and Workstation are at high risk of exploitation. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• VMware Cloud Foundation
• VMware vSphere Foundation
• VMware ESXi
• VMware Workstation Pro
• VMware Fusion
• VMware Tools
• VMware Telco Cloud Platform
• VMware Telco Cloud Infrastructure

Impact:

Depending on the vulnerabilities being exploited, a successful exploitation could lead to remote code execution, denial of service or information disclosure on the affected system.

Recommendation:

Patches for affected systems are available. System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35877
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-41236 (to CVE-2025-41239)