CVE-2025-22226 VMware ESXi, Workstation, And Fusion
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process.
- CVSS
- not scored
On CISA’s exploited list
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
- Added
- 2025-03-04
- Federal patch deadline
- 2025-03-25
- Ransomware use
- not known