CVE-2025-22225: high-severity vulnerability in VMware ESXi
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
VMware ESXi has a flaw that allows someone with access inside a virtual machine process to write data directly to the system's core memory, potentially breaking out of the VM's isolation and affecting the entire server.
An authenticated threat actor with VMX process privileges can trigger an arbitrary kernel write vulnerability to escape the virtual machine sandbox. This requires prior compromise or elevated privileges within the guest environment and results in potential hypervisor-level code execution and privilege escalation.
The full analysis of this CVE is available in Portuguese →