Firetruck

CVE-2025-22225

KEV · Ransomware
Updated Aug 4, 2026 · PUBLISHED
View KEV entry →

Description

VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
VMware Cloud Foundationn/a / VMware Cloud Foundation5.x, 4.5.xaffected
VMware ESXin/a / VMware ESXi>= 7.0, < ESXi70U3s-24585291affected
VMware ESXin/a / VMware ESXi>= 8.0, < ESXi80U3d-24585383affected
VMware ESXin/a / VMware ESXi>= 8.0, < ESXi80U2d-24585300affected
VMware Telco Cloud Infrastructuren/a / VMware Telco Cloud Infrastructure3.x, 2.xaffected
VMware Telco Cloud Platformn/a / VMware Telco Cloud Platform5.x, 4.x, 3.x, 2.xaffected