CVE-2025-22225

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

Score

CVSS 3.1 8.2 High

Status

Analyzed - security@vmware.com

Published

2025-03-04

Last modified

2026-08-04

Known exploited (CISA KEV)

since 2025-03-04, action due 2025-03-25: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

CWE-123, CWE-787

Affected products

• Cloud Foundation (Vmware)
• Esxi (Vmware)
• Telco Cloud Infrastructure (Vmware)
• Telco Cloud Platform (Vmware)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22225