CISA, VMware warn of new vulnerabilities being exploited by hackers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-22224 | TOCTOU Out-of-Bounds Write in VMware ESXi and Workstation Enables Guest-to-Host Escape | 8.2 | 2% | KEV | KEV |
| CVE-2025-22225 | Sandbox Escape via Arbitrary Kernel Write in VMware ESXi (Actively Exploited) | 8.2 | 1% | KEVRansomware | KEV |
| CVE-2025-22226 | Out-of-Bounds Read in VMware ESXi, Workstation, and Fusion Leaks Host Memory via HGFS | 6.0 | 2% | KEV | KEV |
From the original article
2 min read at therecord.media
Federal civilian agencies have three weeks to resolve three recently reported vulnerabilities affecting products from technology giant VMware after the company confirmed the bugs are being exploited by hackers. VMware published an advisory on Tuesday warning customers of CVE-2025-22224, CVE-2025-22225, CVE-2025-22226 — three bugs impacting the company’s popular ESXi, Workstation and Fusion products.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.