AI description
CVE-2026-47876 is an out-of-bounds write vulnerability found in the VMXNET3 virtual network adapter within VMware ESX. This flaw allows an attacker with local administrative privileges on a virtual machine configured with the VMXNET3 adapter to execute code on the underlying ESX host. Successful exploitation of this vulnerability can lead to a virtual machine escape, compromising the isolation boundary between the guest VM and the host. The issue specifically impacts VMware ESX and related products that incorporate ESX, such as VMware Cloud Foundation and VMware vSphere Foundation. Virtual machines utilizing network adapters other than VMXNET3 are not affected by this particular vulnerability.
- Description
- VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.
- Source
- security@vmware.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 9.3
- Impact score
- 6
- Exploitability score
- 2.5
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
- security@vmware.com
- CWE-787
- Hype score
- Not currently trending
Top #CVE to #patch this week 👀 - @VMware #ESXi 9.0 RCE (CVE-2026-47876, CVE-2026-41703) - @JetBrains #TeamCity RCE (CVE-2026-63077, CVE-2026-65907) - #Jenkins Core (CVE-2026-70426) - @zohocorp ManageEngine ADAudit RCE (CVE-2026-6516) - @IBM Langflow RCE (CVE-2026-9198) -
@stansecure
13 Aug 2026
51 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
هشدار امنیتی : دسترسی سرور Vmware Esxi و VCenter رو سریعا محدود به آی پی های خودتون کنید. آسیبپذیری های بحرانی با شناسههای CVE-2026-59309، CVE-2026-59310 و CVE-2026-47876 شناسایی ش
@alisalehiman
5 Aug 2026
3056 Impressions
2 Retweets
41 Likes
20 Bookmarks
1 Reply
0 Quotes
🖥️ Broadcom parchó una falla que deja escapar de una máquina virtual directamente al servidor físico que la aloja. CVE-2026-47876 es un desbordamiento de escritura en el adaptador de red VMXNET3 de ESXi: con privilegios de administrador local en una VM, un atacante puede
@Soy_Nube_Negra
4 Aug 2026
81 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
⚠️ CVE-2026-47876 affects VMware ESX’s VMXNET3 adapter. An attacker with administrative access inside a virtual machine could potentially execute code on the underlying host. Source: Broadcom #VMware #VirtualizationSecurity #CVE
@XQOPTRX
3 Aug 2026
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-59309 and CVE-2026-59310 let attackers bypass vCenter authentication and gain remote code execution. CVE-2026-47876 lets a malicious VM break out to the ESXi host. Patch now. Full analysis on our blog: https://t.co/1ZxE7H75EZ
@FSEvolved
3 Aug 2026
8 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
برای محصولات VMware workstation و ESX و Fusion و vCenter سه آسیب پذیری با کدهای شناسایی CVE-2026-59309 و CVE-2026-59310 و CVE-2026-47876 از نوع authentication bypass و VM escapes منتشر شده است. حتما پچ و به رو
@EthicalSafe
1 Aug 2026
6 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Kritické zranitelnosti v produktech VMware: CVE-2026-59309, CVE-2026-59310 a CVE-2026-47876 https://t.co/vXshekv7r8
@abclinuxu
31 Jul 2026
107 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
🚨 Upozorňujeme na kritické zranitelnosti v produktech VMware, CVE-2026-59309, CVE-2026-59310 a CVE-2026-47876. Zranitelnosti v VMware vCenter umožňují vzdálenému útočníkovi se síťovým přístupem obejít autentizaci a získat neoprávněný přístup k vCenter, p
@GOVCERT_CZ
31 Jul 2026
650 Impressions
3 Retweets
7 Likes
1 Bookmark
0 Replies
1 Quote
Teils kritische Schwachstellen (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) in VMware by Broadcom-Produkten (VMware ESX, vCenter, Workstation, Fusion). Updates sind laut Adversory vorhanden. https://t.co/JefXtYbpy2
@etguenni
31 Jul 2026
337 Impressions
1 Retweet
2 Likes
0 Bookmarks
1 Reply
0 Quotes
VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) https://t.co/d4U3b5FBIT
@autumn_good_35
30 Jul 2026
739 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
1 Quote
⚠️ Vulnerabilidades en productos VMware ❗ CVE-2026-59310 ❗ CVE-2026-59309 ❗ CVE-2026-47876 ➡️ Más info: https://t.co/oLyx4EA1TW https://t.co/ENzqZOx4NN
@CERTpy
30 Jul 2026
173 Impressions
0 Retweets
0 Likes
1 Bookmark
0 Replies
0 Quotes
🚨 ALERTĂ - Vulnerabilități critice în VMware ➡️ Broadcom a publicat în cadrul buletinului VMSA-2026-0006 actualizări care remediază mai multe vulnerabilități din produsele VMware. ⚠️ CVE-2026-59309 ⚠️ CVE-2026-59310 ⚠️ CVE-2026-47876 👉 https://
@DNSC_RO
30 Jul 2026
177 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
VMwareが多数の脆弱性を修正(VMSA-2026-0006)。重大(Critical)な脆弱性として、vCenterの遠隔コード実行CVE-2026-59309及びCVE-2026-59310と、ESXiのVMエスケープCVE-2026-47876が含まれている。境界外書き込みのCVE-2026-41703はESXiのほ
@__kokumoto
29 Jul 2026
647 Impressions
1 Retweet
5 Likes
2 Bookmarks
0 Replies
0 Quotes
VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) https://t.co/WmqO1KgmBJ
@makopicut
29 Jul 2026
88 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Broadcom patches critical VMware flaws, including a VM escape in ESXi (CVE-2026-47876) and an auth bypass in vCenter (CVE-2026-59309). https://t.co/5rqXQqtV7o
@f1tym1
29 Jul 2026
47 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Attackers chained three critical VMware vulnerabilities to escalate from vCenter authentication bypass to ESX host compromise. CVE-2026-59309 and CVE-2026-59310 enabled initial access and code execution, while CVE-2026-47876 allowed VM escape for lateral movement. Runtime
@aviatrixtrc
29 Jul 2026
64 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CRITICAL: Three new VMware flaws patch today auth bypass in vCenter (CVE-2026-59309), RCE via directory traversal (CVE-2026-59310), and VM escape in VMXNET3 (CVE-2026-47876). No active exploitation yet. Update ESXi/vCenter now. https://t.co/SNQLvS4va8 #infosec #cve #vmware
@staatse_sec
29 Jul 2026
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 5 VMware flaws just patched by Broadcom (ESXi, vCenter, Workstation, Fusion): 🔴 Critical: CVE-2026-47876 – VM escape via VMXNET3 adapter CVE-2026-59309 – vCenter auth bypass CVE-2026-59310 – vCenter RCE 🟠 High: CVE-2026-41703 – DoS/info leak 🟡 Low: CVE-20
@techepages
29 Jul 2026
55 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes