← All Advisories

VMware ESXi ionic cloud driver untrusted pointer dereference exposes kernel memory and co-located guest VM memory

Last refreshed2026-09-30

Status: NEW  |  Advisory ID: CVE-2025-62627

Key Details

CVECVE-2025-62627
CVSS Score / Version7.2 (High) / CVSS v4.0
Updated2026-06-17
Classified asCWE-822 (Untrusted Pointer Dereference)

What to Know

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-62627
CVEhttps://www.cve.org/CVERecord?id=CVE-2025-62627