Critical VM Escape Vulnerability Patched in VMware ESXi
Source SecurityWeek
Mentioned vulnerabilities
Rated Low by SecurityWeek
Data as of 29 Jul 2026, 11:52 UTC
What to do
AI-suggested
Official patches are available from Broadcom/VMware for all identified vulnerabilities. Organizations should apply these updates promptly to mitigate the critical VM escape, authentication bypass, and remote code execution vulnerabilities. No in-the-wild exploitation has been reported, but timely patching is strongly recommended. Refer to the vendor's security advisory and FAQ for detailed patching instructions and impact information.
Description
Multiple vulnerabilities have been patched in VMware ESXi, vCenter, Workstation, and Fusion products. Among these, three are rated critical, including a VM escape vulnerability in ESXi's VMXNET3 virtual network adapter that allows code execution on the host by an attacker with local admin privileges on a VM. Other critical issues include a vCenter authentication bypass and a remote code execution vulnerability. Additional high and low severity flaws affect ESXi and related products. No known exploitation in the wild has been reported. Users are advised to apply the available patches promptly.