VMware Patches Critical Zero-Day Flaws That Let Hackers Escape Virtual Machines at Pwn2Own

VMware has patched four critical zero-day vulnerabilities in ESXi, Workstation, Fusion, and Tools products that were exploited at Pwn2Own Berlin 2025. Three vulnerabilities (CVE-2025-41236, CVE-2025-41237, CVE-2025-41238) carry 9.3 severity ratings and enable virtual machine escape attacks...