vulnerability
VMSA-2024-0006: ESXi Out-of-bounds write vulnerability (CVE-2024-22254)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:L/AC:L/Au:M/C:C/I:C/A:N) | Mar 5, 2024 | Mar 7, 2024 | Jun 24, 2026 |
Severity
6
CVSS
(AV:L/AC:L/Au:M/C:C/I:C/A:N)
Published
Mar 5, 2024
Added
Mar 7, 2024
Modified
Jun 24, 2026
Description
VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.
Solutions
vmware-esxi700-upgrade-23307199vmware-esxi701-upgrade-23307199vmware-esxi702-upgrade-23307199vmware-esxi703-upgrade-23307199vmware-esxi800-upgrade-23299997vmware-esxi801-upgrade-23299997vmware-esxi802-upgrade-23305545
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.