CVE-2025-22225
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.
CISA Known Exploited Vulnerability
Vendor / Product
VMware — ESXi
Date Added
2025-03-04
Remediation Due
2025-03-25
Ransomware Use
CONFIRMED
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22225
Affected Software (55)
| Vendor | Product | Version |
|---|---|---|
| vmware | cloud_foundation | - |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0 |
Showing 30 of 55 entries
References & Advisories (2)
Vendor Advisory
US Government Resource