Threats Tagged 'cve-2026-41703'

CVE-2026-41703 is an out-of-bounds read vulnerability in VMware ESX, Workstation, and Fusion. A malicious actor with VM deployment privileges could exploit this to cause information disclosure or a denial-of-service (DoS) condition. The impact on Workstation and Fusion is limited to information disclosure, while on ESX it may lead to DoS of the host process. The vulnerability affects VMware Cloud Foundation versions 5.x, 9.0.x.x, and 9.1.x.x. No official patch or remediation guidance has been published yet.

VMware vCenter in Cloud Foundation contains a critical authentication bypass vulnerability in the VMware Directory Service. This flaw allows an attacker with network access to bypass authentication and gain unauthorized access to the system. The vulnerability affects multiple versions of Cloud Foundation, including 5.x, 9.0.x.x, and 9.1.x.x. The vulnerability has a CVSS score of 9.8, indicating a critical severity with high impact on confidentiality, integrity, and availability. No official patch or remediation details are provided in the available data. There are no known exploits in the wild at this time.