CVE-2025-22226

HIGH CISA KEV
Published Mar 4, 2025 Modified Oct 30, 2025 CWE-125

Description

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.

CVSS v3.1 Score

7.1
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild.

Added: Mar 4, 2025 Remediation due: Mar 25, 2025

Weakness Type (CWE)

CWE-125 Out-of-bounds Read

Affected Products

Vendor Product
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware esxi
vmware cloud_foundation
vmware fusion
vmware telco_cloud_infrastructure
vmware telco_cloud_infrastructure
vmware telco_cloud_infrastructure
vmware telco_cloud_infrastructure
vmware telco_cloud_platform
vmware telco_cloud_platform
vmware telco_cloud_platform
vmware telco_cloud_platform
vmware telco_cloud_platform
vmware telco_cloud_platform
vmware telco_cloud_platform
vmware workstation

References

Frequently Asked Questions

What is CVE-2025-22226? +
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process. It has a CVSS v3.1 base score of 7.1 (HIGH). This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild.
How severe is CVE-2025-22226? +
CVE-2025-22226 has a CVSS v3.1 score of 7.1 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2025-22226? +
CVE-2025-22226 affects products from vmware, specifically: cloud_foundation, esxi, fusion, telco_cloud_infrastructure, telco_cloud_platform, workstation. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2025-22226? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2025-22226 — free, no signup required.

Start Free Scan