{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Die Virtualisierungssoftware von VMware ermöglicht die simultane Ausführung von verschiedenen Betriebssystemen auf einem Host-System.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in VMware ESXi, VMware vCenter Server, VMware Workstation und VMware Fusion ausnutzen, um einen Denial of Service zuverursachen, Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Code auszuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- Sonstiges\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-2569 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2569.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-2569 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2569"
    }, {
      "category" : "external",
      "summary" : "VMware Security Advisory VMSA-2026-0006 vom 2026-07-28",
      "url" : "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"
    }, {
      "category" : "external",
      "summary" : "Google Cloud Platform Security Bulletin GCP-2026-050 vom 2026-07-29",
      "url" : "https://docs.cloud.google.com/support/bulletins#gcp-2026-050"
    } ],
    "source_lang" : "en-US",
    "title" : "VMware Produkte: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-07-29T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-07-30T08:27:59.040+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-2569",
      "initial_release_date" : "2026-07-28T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-07-28T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2026-07-29T22:00:00.000+00:00",
        "number" : "2",
        "summary" : "Neue Updates von Google aufgenommen"
      } ],
      "status" : "final",
      "version" : "2"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "category" : "product_name",
        "name" : "Google Cloud Platform",
        "product" : {
          "name" : "Google Cloud Platform",
          "product_id" : "393401",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:google:cloud_platform:-"
          }
        }
      } ],
      "category" : "vendor",
      "name" : "Google"
    }, {
      "branches" : [ {
        "category" : "product_name",
        "name" : "VMware ESXi",
        "product" : {
          "name" : "VMware ESXi",
          "product_id" : "1820472",
          "product_identification_helper" : {
            "cpe" : "cpe:/o:vmware:esxi:-"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "VMware Fusion",
        "product" : {
          "name" : "VMware Fusion",
          "product_id" : "T009574",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:vmware:fusion:-"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "VMware Workstation",
        "product" : {
          "name" : "VMware Workstation",
          "product_id" : "11768",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:vmware:workstation:-"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "VMware vCenter Server",
        "product" : {
          "name" : "VMware vCenter Server",
          "product_id" : "T012302",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:vmware:vcenter_server:-"
          }
        }
      } ],
      "category" : "vendor",
      "name" : "VMware"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-41703",
    "product_status" : {
      "known_affected" : [ "11768", "T012302", "393401", "1820472", "T009574" ]
    },
    "release_date" : "2026-07-28T22:00:00.000+00:00",
    "title" : "CVE-2026-41703"
  }, {
    "cve" : "CVE-2026-41709",
    "product_status" : {
      "known_affected" : [ "11768", "T012302", "393401", "1820472", "T009574" ]
    },
    "release_date" : "2026-07-28T22:00:00.000+00:00",
    "title" : "CVE-2026-41709"
  }, {
    "cve" : "CVE-2026-47876",
    "product_status" : {
      "known_affected" : [ "11768", "T012302", "393401", "1820472", "T009574" ]
    },
    "release_date" : "2026-07-28T22:00:00.000+00:00",
    "title" : "CVE-2026-47876"
  }, {
    "cve" : "CVE-2026-59309",
    "product_status" : {
      "known_affected" : [ "11768", "T012302", "393401", "1820472", "T009574" ]
    },
    "release_date" : "2026-07-28T22:00:00.000+00:00",
    "title" : "CVE-2026-59309"
  }, {
    "cve" : "CVE-2026-59310",
    "product_status" : {
      "known_affected" : [ "11768", "T012302", "393401", "1820472", "T009574" ]
    },
    "release_date" : "2026-07-28T22:00:00.000+00:00",
    "title" : "CVE-2026-59310"
  } ]
}