CVE-2026-41703

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Jul 30, 2026
Source updated: Jul 30, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Out-of-bounds read vulnerability

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condition of the host process. On Workstation and Fusion, the impact of this vulnerability is restricted to information disclosure.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cloud Foundation

Vendor: VMware
Product: Cloud Foundation
Platforms: Unknown
Default status: unaffected

Cloud Foundation · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
9.1.x.x	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.0.x.x	`affected`	Unavailable	Unavailable	Unavailable	None listed
5.x	`affected`	custom	5.2.3	Unavailable	None listed

vSphere Foundation

Vendor: VMware
Product: vSphere Foundation
Platforms: Unknown
Default status: unaffected

vSphere Foundation · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
9.1.x.x	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.0.x.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

ESX

Vendor: VMware
Product: ESX
Platforms: Unknown
Default status: unaffected

ESX · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
9.1.x.x	`affected`	custom	ESXi-9.1.0.0-25370933	Unavailable	None listed
9.0.x.x	`affected`	custom	ESXi-9.0.2.0100-25595025	Unavailable	None listed
8.0	`affected`	custom	ESXi80U3i-25205845	Unavailable	None listed

Workstation

Vendor: VMware
Product: Workstation
Platforms: Unknown
Default status: unaffected

Workstation · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
25H2	`affected`	custom	26H1	Unavailable	None listed

Fusion

Vendor: VMware
Product: Fusion
Platforms: Unknown
Default status: unaffected

Fusion · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
25H2	`affected`	custom	26H1	Unavailable	None listed

Telco Cloud Platform

Vendor: VMware
Product: Telco Cloud Platform
Platforms: Unknown
Default status: unaffected

Telco Cloud Platform · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
5.1.x	`affected`	Unavailable	Unavailable	Unavailable	None listed
5.0.x	`affected`	Unavailable	Unavailable	Unavailable	None listed