← Back

CVE-2025-22225

nvd nist
Published: Mar 4, 2025Modified: Jun 17, 2026CISA KEV

JSON object

Loading...
8.2
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Exploitability: 1.5 / Impact: 6.0
Source: NVD

Description

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

Affected (55)

Vmware
4 products
Esxi
Cloud Foundation
Telco Cloud Infrastructure
Telco Cloud Platform
Configuration A
43 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 7.0
Esxi
Version 7.0 beta
Esxi
Version 7.0 update_1
Esxi
Version 7.0 update_1a
Esxi
Version 7.0 update_1b
Esxi
Version 7.0 update_1c
Esxi
Version 7.0 update_1d
Esxi
Version 7.0 update_1e
Esxi
Version 7.0 update_2
Esxi
Version 7.0 update_2a
Esxi
Version 7.0 update_2c
Esxi
Version 7.0 update_2d
Esxi
Version 7.0 update_2e
Esxi
Version 7.0 update_3
Esxi
Version 7.0 update_3c
Esxi
Version 7.0 update_3d
Esxi
Version 7.0 update_3e
Esxi
Version 7.0 update_3f
Esxi
Version 7.0 update_3g
Esxi
Version 7.0 update_3i
Esxi
Version 7.0 update_3j
Esxi
Version 7.0 update_3k
Esxi
Version 7.0 update_3l
Esxi
Version 7.0 update_3m
Esxi
Version 7.0 update_3n
Esxi
Version 7.0 update_3o
Esxi
Version 7.0 update_3p
Esxi
Version 7.0 update_3q
Esxi
Version 7.0 update_3r
Esxi
Version 8.0
Esxi
Version 8.0 a
Esxi
Version 8.0 b
Esxi
Version 8.0 c
Esxi
Version 8.0 update_1
Esxi
Version 8.0 update_1a
Esxi
Version 8.0 update_1c
Esxi
Version 8.0 update_1d
Esxi
Version 8.0 update_2
Esxi
Version 8.0 update_2b
Esxi
Version 8.0 update_2c
Esxi
Version 8.0 update_3
Esxi
Version 8.0 update_3b
Esxi
Version 8.0 update_3c
Configuration B
12 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Foundation
All versions
Vmware
Telco Cloud Infrastructure
Version 2.2
Telco Cloud Infrastructure
Version 2.5
Telco Cloud Infrastructure
Version 2.7
Telco Cloud Infrastructure
Version 3.0
Vmware
Telco Cloud Platform
Version 2.0
Telco Cloud Platform
Version 2.5
Telco Cloud Platform
Version 2.7
Telco Cloud Platform
Version 3.0
Telco Cloud Platform
Version 4.0.1
Telco Cloud Platform
Version 4.0
Telco Cloud Platform
Version 5.0

Related CWEs

CWE-123
Write-what-where Condition
Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

Source: security@vmware.com
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.