VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to leak memory from processes communicating with vSockets.

The version of VMware Tools installed on the remote Windows host is 11.x, 12.x prior to 12.5.3, or 13.x prior to 13.0.1.0. It is, therefore, affected by an information disclosure vulnerbility:

  - VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage     of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine     may be able to exploit this issue to leak memory from processes communicating with vSockets. (CVE-2025-41239)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of VMware ESXi installed on the remote host is 7.x prior to 7.0 Update 3w, 8.x prior to 8.0 Update 2e, or 8.0 Update 3 prior to 8.0 Update 3f. It is, therefore, affected by multiple vulnerabilities as referenced in the VMSA-2025-0013 advisory:

  - VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network     adapter. (CVE-2025-41236)

  - VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI (Virtual Machine Communication Interface)     that leads to an out-of-bounds write. (CVE-2025-41237)

  - VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI)     controller that leads to an out of-bounds write. (CVE-2025-41238)

  - VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage     of an uninitialised memory in vSockets. (CVE-2025-41239)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of VMware Workstation installed on the remote host is 13.0.x prior to 13.6.4 or 17.0.x prior to 17.6.4. It is, therefore, affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
247827	VMware Tools 11.x / 12.x < 12.5.3 / 13.x < 13.0.1.0 vSockets Information Disclosure (VMSA-2025-0013)	Nessus	Windows	medium
242168	VMware ESXi 7.x < 7.0 Update 3w / 8.x < 8.0 Update 2e / 8.0 Update 3 < 8.0 Update 3f (VMSA-2025-0013)	Nessus	Misc.	critical
242128	VMware Workstation 13.0.x < 13.6.4 / 17.0.x < 17.6.4 Multiple Vulnerabilities (VMSA-2025-0013)	Nessus	General	high

Detections

Analytics

CVE-2025-41239

high

Tenable Plugins

medium

critical

high