by Kastro
Paper/Archive/CVE-2025-22224

CVE-2025-22224

VMware ESXi — VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

KEV · due 25 MarEPSS 2%public exploitSSVC actCVSS 9.3
critical.is priorityof 100
93
CVSS 9.3 (CNA)9.3 / 10 × 3027.9In CISA KEV+3030.0EPSS percentile 75.2.752 × 2015.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

Affected

ProductAffectedFixed inSource
ESXi8.0 – < ESXi80U3d-24585383ESXi80U3d-24585383CNA
ESXi8.0 – < ESXi80U2d-24585300ESXi80U2d-24585300CNA
ESXi7.0 – < ESXi70U3s-24585291ESXi70U3s-24585291CNA
Workstation17.x – < 17.6.317.6.3CNA
VMware Cloud Foundation5.x, 4.5.x–CNA
Telco Cloud Platform5.x, 4.x, 3.x, 2.x–CNA
Telco Cloud Infrastructure3.x, 2.x–CNA

Scores by source

vmware (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

refsupport.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22224kevcisa.gov/known-exploited-vulnerabilities-catalog