VMware ESX OOB Write via VMXNET3 Adapter Exploits Host
CVE-2026-47876 Published on July 30, 2026

VMXNET3 out-of-bounds write vulnerability
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.

NVD

Vulnerability Analysis

CVE-2026-47876 is exploitable with local system access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is a Memory Corruption Vulnerability?

The software writes data past the end, or before the beginning, of the intended buffer. Typically, this can result in corruption of data, a crash, or code execution. The software may modify an index or perform pointer arithmetic that references a memory location that is outside of the boundaries of the buffer. A subsequent write operation then produces undefined or unexpected results.

CVE-2026-47876 has been classified to as a Memory Corruption vulnerability or weakness.


Products Associated with CVE-2026-47876

Want to know whenever a new CVE is published for VMware products? stack.watch will email you.

VMware Cloud Foundation
 
VMware Esx
 
VMware Telco Cloud Platform
 

Affected Versions

VMware Cloud Foundation: VMware vSphere Foundation: VMware ESX: VMware Telco Cloud Platform: