CVE-2025-22224
CVE-2025-22224
In short
VMware ESXi and Workstation have a race condition flaw that allows someone with admin access to a virtual machine to write data outside allowed memory bounds, potentially letting them run malicious code on the host system.
Technical detail
A TOCTOU vulnerability in VMware ESXi and Workstation permits out-of-bounds memory writes when a window exists between privilege validation and memory access. An attacker with local administrative privileges within a guest VM can exploit this race condition to achieve arbitrary code execution in the VMX process on the host, breaching VM isolation.
Summary generated and translated by AI from the official description.
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
VMware · ESXiVMware · Telco Cloud InfrastructureVMware · Telco Cloud PlatformVMware · VMware Cloud FoundationVMware · WorkstationWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →