VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a vir…

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine using the VMXNET3 adapter can exploit this vulnerability to execute arbitrary code on the host system. This represents a guest-to-host escape scenario, which is considered high severity in virtualization environments. Only virtual machines using the VMXNET3 adapter are affected; other virtual network adapter types are not impacted. The vulnerability has been assigned CVE-2026-47876 and is tracked by NVD and Broadcom security advisories.