FIxed: Broadcom has evaluated the severity of this issue to be in the moderate severity range.

VMware ESXi 8.0 Update 3f Release Notes
July 15, 2025

What's New

• This release resolves CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, and CVE-2025-41239. For more information on these vulnerabilities and their impact on Broadcom products, see VMSA-2025-0013.
• This release resolves CVE-2025-2884. Broadcom has evaluated the severity of this issue to be in the moderate severity range.

Resolved Issues
ESXi_8.0.3-0.73.24784735

Patch Category:Security
Patch Severity:Critical
Host Reboot Required:Yes
Virtual Machine Migration or Shutdown Required:Yes
Affected Hardware:N/A
Affected Software:N/A
Affected VIBs:

• VMware_bootbank_esxio-combiner_8.0.3-0.73.24784735
• VMware_bootbank_vsan_8.0.3-0.73.24784735
• VMware_bootbank_infravisor_8.0.3-0.73.24784735
• VMware_bootbank_esxio-dvfilter-generic-fastpath_8.0.3-0.73.24784735
• VMware_bootbank_crx_8.0.3-0.73.24784735
• VMware_bootbank_bmcal_8.0.3-0.73.24784735
• VMware_bootbank_vsanhealth_8.0.3-0.73.24784735
• VMware_bootbank_drivervm-gpu-base_8.0.3-0.73.24784735
• VMware_bootbank_gc_8.0.3-0.73.24784735
• VMware_bootbank_vdfs_8.0.3-0.73.24784735
• VMware_bootbank_native-misc-drivers-esxio_8.0.3-0.73.24784735
• VMware_bootbank_esx-base_8.0.3-0.73.24784735
• VMware_bootbank_esx-dvfilter-generic-fastpath_8.0.3-0.73.24784735
• VMware_bootbank_esx-xserver_8.0.3-0.73.24784735
• VMware_bootbank_vds-vsip_8.0.3-0.73.24784735
• VMware_bootbank_cpu-microcode_8.0.3-0.73.24784735
• VMware_bootbank_esxio_8.0.3-0.73.24784735
• VMware_bootbank_clusterstore_8.0.3-0.73.24784735
• VMware_bootbank_esxio-base_8.0.3-0.73.24784735
• VMware_bootbank_trx_8.0.3-0.73.24784735
• VMware_bootbank_gc-esxio_8.0.3-0.73.24784735
• VMware_bootbank_esxio-combiner-esxio_8.0.3-0.73.24784735
• VMware_bootbank_bmcal-esxio_8.0.3-0.73.24784735
• VMware_bootbank_vcls-pod-crx_8.0.3-0.73.24784735
• VMware_bootbank_native-misc-drivers_8.0.3-0.73.24784735

PRs Fixed:N/A
CVE numbers:
CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239, CVE-2025-2884