VULNERABILITY INTELLIGENCE

CVE-2025-62623

CVSS score8.8 HIGH
EPSS probability0.10%
CISA KEVNot currently listed
Published2026-05-13
Last modified2026-10-07
CVSS vectorCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Description

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Weakness classification

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references