CVE-2025-22226
🔥 Known Exploited (CISA KEV)HIGH
7.1
CVSS Severity Score
Vulnerability Description
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Affected Platforms (CPE)
💻
Vmware
Esxi
= 7.0= 8.0
📦
Vmware
Cloud Foundation
All versions
📦
Vmware
Fusion
>= 13.0.0 and < 13.6.3
📦
Vmware
Telco Cloud Infrastructure
= 2.2= 2.5= 2.7= 3.0