VulnerabilitySANS NewsBites
Fixes Available for Five VMware Vulnerabilities
NEOSEC enrichment — no mirror of the original source
On Wednesday, July 29, Broadcom released updates to address five vulnerabilities that affect VMware ESX, VMware vCenter, VMware Workstation, VMware Fusion, VMware Cloud Foundation, VMware vSphere Foundation, VMware Telco Cloud Platform, and
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Frost, Neely.
Linked advisories
- CVE-2026-41709VMware ESX enthält eine Schwachstelle aufgrund unzureichender Protokollierung.
- CVE-2026-59310Broadcom VMware vCenter — Broadcom VMware vCenter Path Traversal Vulnerability
- CVE-2026-47876VMware ESXi enthält eine Schwachstelle für einen Schreibzugriff außerhalb der Grenzen im virtuellen Netzwerkadapter VMXNET3.
- CVE-2026-59310Broadcom VMware vCenter: Pfadüberschreitung (Path Traversal)
- CVE-2026-59309VMware Produkte: Mehrere Schwachstellen
- CVE-2026-41703VMware ESX, Workstation und Fusion enthalten eine Schwachstelle für einen Out-of-Bounds-Lesezugriff.
- CVE-2026-47876VMware ESX: Schreiben außerhalb des zugewiesenen Speichers (Out-of-bounds Write)
- CVE-2026-41703VMware ESX: Lesen außerhalb des zugewiesenen Speichers (Out-of-bounds Read)
- CVE-2026-41709Broadcom VMware ESX — Broadcom VMWare ESX Insufficient Logging Vulnerability
- CVE-2026-59309VMware vCenter: fehlerhafte Implementierung der Authentifizierung
- CVE-2026-59309VMware vCenter: fehlerhafte Implementierung der Authentifizierung
Affected vendors and products
More on Available
Other advisories
- HighCVE-2026-111036Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the document conversion functionality available …
- Not ratedosv:ECHO-f62c-6c16-552eGHSA-p85m-gvr3-788c: hostname verification skipped on the OpenSSL client path with a plain X509TrustManager when trust-manager wrapping is unavailable (Java 25+). Upstream's fix (in https://github.com/netty/netty/commit/9e05192391, 4.1.137.Final) only adds a check at context creation for an endpoint identification algorithm set with SslContextBuilder.endpointIdentificationAlgorithm(...), which netty added in 4.1.112.Final (0deca94aa1); 4.1.74.Final has no such setting. The other way to ask for hostname verification, SSLParameters on the engine, is the same in 4.1.74.Final and in fixed 4.1.137.Final (it sets SSL_CVERIFY_REQUIRED and leaves the check to the trust manager), and the fix does not change it. CVE-2026-50010, patched above, covers wrapping plain trust managers.
- Not ratedosv:CLEANSTART-2024-BY65148Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the cloud, and make it available on other computers in certa...
- Not ratedosv:CLEANSTART-2024-DE37249x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so cal...
- Not ratedosv:CLEANSTART-2024-VE21564x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so calle...
- Not ratedosv:CLEANSTART-2025-FV38103It was found that the superexec operator was available in the internal dictionary in ghostscript before 9
- Not ratedosv:CLEANSTART-2025-KN17068containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows
- Not ratedosv:CLEANSTART-2024-AF06536vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file
Other news entries
- QNAP says hackers breaching NAS devices in Plex2Shell attacksNewsBleepingComputer
- Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver ItNewsThe Hacker News
- Want to Rent an Internet Address at the White House?NewsKrebs on Security
- Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for TestingNewsThe Hacker News
- Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them MovingNewsThe Hacker News
- Everyday channels are available in an incident, but you may not want themNewsCSO Online
- Fake crypto app on Apple App Store linked to $23K wallet theftNewsBleepingComputer
- When prevention fails: Why cyber resilience is the next big test of trustNewsCSO Online
ID