Exploit / PoCcriticalExploited in the wild

Auth bypass CVE-2025

Security Affairsby @securityaffairsMar 26, 2025 · 07:07 UTC (Mar 26, 2025)2 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-22230 CVE-2025-22224 CVE-2025-22225 CVE-2025-22226

Tags: cve-2025-22230 cve-2025-22224 cve-2025-22225 cve-2025-22226 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-22224	TOCTOU Out-of-Bounds Write in VMware ESXi and Workstation Enables Guest-to-Host Escape	8.2	2%	KEV	Mar 4, 2025 KEV Mar 4, 2025
CVE-2025-22225	Sandbox Escape via Arbitrary Kernel Write in VMware ESXi (Actively Exploited)	8.2	1%	KEVRansomware	Mar 4, 2025 KEV Mar 4, 2025
CVE-2025-22226	Out-of-Bounds Read in VMware ESXi, Workstation, and Fusion Leaks Host Memory via HGFS	6.0	2%	KEV	Mar 4, 2025 KEV Mar 4, 2025
CVE-2025-22230	VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control	7.8	<1%		Mar 25, 2025

From the original article

2 min read at securityaffairs.com

Broadcom addressed a high-severity authentication bypass vulnerability, tracked as CVE-2025-22230, in VMware Tools for Windows. Broadcom released security updates to address a high-severity authentication bypass vulnerability, tracked as CVE-2025-22230 (CVSS score 9. 8), impacting VMware Tools for Windows.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.