What the vulnerability does
01Description
A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVSS base score
8.8/10
CVSS vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Key dates
02Disclosure timeline
May 13, 2026
CVE published
May 14, 2026
Record updated
External resources
