CyberSec.Space Logo
Back to CVE Browser

CVE-2025-22225

🔥 Known Exploited (CISA KEV)HIGH
8.2
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-03-04
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

Affected Platforms (CPE)

💻
Vmware

Esxi

= 7.0= 8.0
📦
Vmware

Cloud Foundation

All versions
📦
Vmware

Telco Cloud Infrastructure

= 2.2= 2.5= 2.7= 3.0
📦
Vmware

Telco Cloud Platform

= 2.0= 2.5= 2.7= 3.0= 4.0= 4.0.1= 5.0

References & Advisories

🔗 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22225

Related Security Intelligence Articles

Global Cyber Intel Digest: July 21, 2026

Comprehensive breakdown of critical vulnerability advisories across VMware vCenter, F5 BIG-IP, and GitLab platforms, alongside threat actor reconnaissance trends and ransomware response strategies.

2026-07-21

Related Vulnerabilities

CVE-2025-412397.1

VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uniniti...

CVE-2025-412389.3

VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI) controller that le...

CVE-2025-412379.3

VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI (Virtual Machine Communication Interface) that leads to ...

CVE-2025-412369.3

VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious...