CVE-2025-41236
VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine wi...
Affects 0 products across 3 vendors.
Software writes data past buffer boundaries, corrupting memory and potentially enabling code execution.
VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter that could allow a malicious actor with local administrative privileges to execute code on the host. This vulnerability has a CVSS score of 9.3, indicating high severity. Affected vendors include VMware, Fusion, and Rockwell Automation. Immediate attention is required to mitigate the risk of exploitation.
BSID: BS-2025-GLOBAL-259597-C • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-41236?
What is the CVSS score for CVE-2025-41236?
Is CVE-2025-41236 actively exploited?
How do I remediate CVE-2025-41236?
What systems are affected by CVE-2025-41236?
What NERC-CIP standard applies to CVE-2025-41236?
What IEC 62443 requirement maps to CVE-2025-41236?
| CVE ID | CVE-2025-41236 |
|---|---|
| BSID | BS-2025-GLOBAL-259597-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| Published | 2025-07-15 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 70% |
| Weakness (CWE) | |
| Verticals | |
| Domains | |
| Source | NVD |
VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.
Source: NIST NVD / MITRE CVE Database
The vulnerability exists in the VMXNET3 virtual network adapter of VMware ESXi, Workstation, and Fusion. A malicious actor with local administrative privileges on a virtual machine can exploit this integer overflow to execute arbitrary code on the host system. This could lead to full control over the host, potentially compromising the entire environment. Non-VMXNET3 virtual adapters are not affected.
Exploitation Likelihood: MEDIUM
| Vendor | Product | Affected Versions |
|---|---|---|
| Fusion | — | — |
| Rockwell Automation | — | — |
| Vmware | — | — |
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
Implement strict access controls and monitoring for virtual machines with VMXNET3 adapters to detect and prevent unauthorized administrative actions.
No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. A network rule is only drafted when a concrete on-the-wire signature can be grounded in the advisory.
This CVE violates CIP-007-R2 as it allows unauthorized access to critical cyber assets, which could compromise the reliability and security of the bulk electric system.
This CVE maps to SR 7.6 because it involves a vulnerability that could be exploited to gain unauthorized control over the host system, which is a critical security concern in ICS environments.
Drafted by AI and not validated for your network. Test in an isolated environment before any production deployment. Compensating control only - does not replace vendor patch.
AI Enrichment Record — provenance & audit hash
| Model | Qwen/Qwen2.5-72B-Instruct-AWQ |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 4b22c4b6e2048f0326a8ae69e57ab290d5aeefbe4900fa991ce97c70171e1a90032f203deab0983efbc51530c5d7f583f7dbc8e9f4a5d4c349183f999f928253 |
Critical Severity - Know Your Exposure
A CVSS 9.3 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →