vulnerability

VMware Workstation: Vulnerability (VMSA-2025-0004) (CVE-2025-22225)

Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
Mar 4, 2025
Added
Mar 4, 2025
Modified
Mar 30, 2026

Description

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

Solution

vmware-workstation-upgrade-17_6_3
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.