VMware Warns Customers to Patch Actively Exploited Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-22224 | TOCTOU Out-of-Bounds Write in VMware ESXi and Workstation Enables Guest-to-Host Escape | 8.2 | 2% | KEV | KEV |
| CVE-2025-22225 | Sandbox Escape via Arbitrary Kernel Write in VMware ESXi (Actively Exploited) | 8.2 | 1% | KEVRansomware | KEV |
| CVE-2025-22226 | Out-of-Bounds Read in VMware ESXi, Workstation, and Fusion Leaks Host Memory via HGFS | 6.0 | 2% | KEV | KEV |
From the original article
2 min read at infosecurity-magazine.com
VMware has issued a critical security advisory, warning customers that three zero-day vulnerabilities are being actively exploited in the wild. The vulnerabilities range from important to severe in severity levels, and impact the VMware ESXi, Workstation and Fusion products. The flaws were reported to the cloud software firm by Microsoft Threat Intelligence Center.
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.