CVE-2025-22225

HIGHCVSS 8.2Known Exploited

CISA Known Exploited Vulnerability

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22225

Remediation deadline: March 25, 2025

Ransomware use: Known

Description

VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.

Timeline

Published:March 4th, 2025 12:15 PM

Last modified:August 4th, 2026 5:16 AM

Added to KEV:March 4th, 2025

CVSS Scoring

CVSS v3: 8.2 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected Software

From NVD CPE configuration data

Vendors

vmware

Products

esxicloud_foundationtelco_cloud_infrastructuretelco_cloud_platform

Weaknesses (CWE)

CWE-787 CWE-123

References & Reports

Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute