CVE-2025-22225

VMware ESXi has a flaw that allows someone with access inside a virtual machine process to write data directly to the system's core memory, potentially breaking out of the VM's isolation and affecting the entire server.

An authenticated threat actor with VMX process privileges can trigger an arbitrary kernel write vulnerability to escape the virtual machine sandbox. This requires prior compromise or elevated privileges within the guest environment and results in potential hypervisor-level code execution and privilege escalation.