CVE-2026-41703: Out-of-bounds read vulnerability

Published Jul 30, 2026
·
Updated

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condition of the host process. On Workstation and Fusion, the impact of this vulnerability is restricted to information disclosure.

Affected Software

3 affected components
VMware VMware ESX
VMware VMware Workstation
VMware VMware Fusion

Event History

Jul 30, 2026
CVE Published
via MITRE·12:39 PM
Data Sourced
via MITRE·12:39 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-41703?

CVE-2026-41703 has a high severity rating of 7.6.

2

What risks are associated with CVE-2026-41703?

CVE-2026-41703 presents risks of information disclosure and potential denial-of-service (DoS) conditions.

3

How do I fix CVE-2026-41703?

To mitigate CVE-2026-41703, ensure you are using the updated versions of VMware ESX, Workstation, and Fusion as provided in VMware's security advisories.

4

Who is affected by CVE-2026-41703?

Users with VM deployment privileges on VMware ESX, Workstation, and Fusion are affected by CVE-2026-41703.

5

What systems are vulnerable to CVE-2026-41703?

CVE-2026-41703 impacts VMware ESX, VMware Workstation, and VMware Fusion.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203