Vulnerability-Lookup

CVE-2025-22225 (GCVE-0-2025-22225)

Vulnerability from cvelistv5 – Published: 2025-03-04 11:56 – Updated: 2026-08-04 03:55

CISA Previdian

Summary

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-03-04 00:00 UTC

CWE

Arbitrary write vulnerability
CWE-123 - Write-what-where Condition

Assigner

vmware mitre root

References

2 references

URL	Tags
https://support.broadcom.com/web/ecx/support-cont…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

4 products

Vendor	Product	Version
n/a	VMware ESXi	Affected: 8.0 , < ESXi80U3d-24585383 (custom) Affected: 8.0 , < ESXi80U2d-24585300 (custom) Affected: 7.0 , < ESXi70U3s-24585291 (custom)
n/a	VMware Cloud Foundation	Affected: 5.x, 4.5.x
n/a	VMware Telco Cloud Platform	Affected: 5.x, 4.x, 3.x, 2.x
n/a	VMware Telco Cloud Infrastructure	Affected: 3.x, 2.x

Date Public

2025-03-04 11:50

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 626a0247-a4dd-4f9b-b76c-16724d814294

Vulnerability ID: CVE-2025-22225

Status: Confirmed

Status Updated: 2025-03-04 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2025-03-04

Asserted: 2025-03-04

Scope

Notes: KEV entry: VMware ESXi Arbitrary Write Vulnerability | Affected: VMware / ESXi | Description: VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2025-03-25 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22225

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-123
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	ESXi
Due Date	2025-03-25
Date Added	2025-03-04
Vendorproject	VMware
Vulnerabilityname	VMware ESXi Arbitrary Write Vulnerability
Knownransomwarecampaignuse	Unknown

References

CVE-2025-22225

Created: 2026-02-02 12:26 UTC | Updated: 2026-02-06 07:17 UTC

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 52b920a6-8dfb-4138-aca0-ce0383516e53

Vulnerability ID: CVE-2025-22225

Status: Confirmed

Status Updated: 2025-03-04 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2025-03-04

Asserted: 2025-03-04

Scope

Notes: KEVIntel entry: VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary... | Affected: VMware / VMware ESXi, VMware Cloud Foundation, VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure | CVSS: 8.2 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False

Evidence

Type: Public Report

Signal: Confirmed Compromise

Confidence: 70%

Source: kevintel

Details

Feed	KEVIntel (kevintel.com)
Title	VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary...
Vendor	VMware
Product	VMware ESXi, VMware Cloud Foundation, VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure
Added Date	2025-03-04T00:00:00.000Z
Cvss Score	8.2
Epss Score	None
Cvss Severity	HIGH
Epss Percentile	None
Used In Malware	yes
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	False

References

Created: 2026-06-23 14:06 UTC | Updated: 2026-07-10 06:14 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-22225",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-04T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-03-04",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22225"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-123",
                "description": "CWE-123 Write-what-where Condition",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-04T03:55:46.011Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22225"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2025-03-04T00:00:00.000Z",
            "value": "CVE-2025-22225 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "VMware ESXi",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "ESXi80U3d-24585383",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "ESXi80U2d-24585300",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "ESXi70U3s-24585291",
              "status": "affected",
              "version": "7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VMware Cloud Foundation",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "5.x, 4.5.x"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VMware Telco Cloud Platform",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "5.x, 4.x, 3.x, 2.x"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VMware Telco Cloud Infrastructure",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "3.x, 2.x"
            }
          ]
        }
      ],
      "datePublic": "2025-03-04T11:50:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eVMware ESXi contains an \u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003earbitrary write\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003evulnerability.\u0026nbsp;\u003c/span\u003eA malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u003cbr\u003e\u003cbr\u003e\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "VMware ESXi contains an arbitrary write\u00a0vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Arbitrary write vulnerability",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-04T11:56:27.537Z",
        "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "shortName": "vmware"
      },
      "references": [
        {
          "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
    "assignerShortName": "vmware",
    "cveId": "CVE-2025-22225",
    "datePublished": "2025-03-04T11:56:27.537Z",
    "dateReserved": "2025-01-02T04:29:59.190Z",
    "dateUpdated": "2026-08-04T03:55:46.011Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2025-22225",
      "cwes": [
        "CWE-123"
      ],
      "dateAdded": "2025-03-04",
      "dueDate": "2025-03-25",
      "forensicTriage": "No",
      "knownRansomwareCampaignUse": "Known",
      "notes": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22225",
      "product": "ESXi",
      "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "shortDescription": "VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.",
      "vendorProject": "VMware",
      "vulnerabilityName": "VMware ESXi Arbitrary Write Vulnerability"
    },
    "epss": {
      "cve": "CVE-2025-22225",
      "date": "2026-09-20",
      "epss": "0.00997",
      "percentile": "0.61188"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "VMware ESXi",
                "vendor": "n/a",
                "versions": [
                  {
                    "lessThan": "ESXi80U3d-24585383",
                    "status": "affected",
                    "version": "8.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "ESXi80U2d-24585300",
                    "status": "affected",
                    "version": "8.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "ESXi70U3s-24585291",
                    "status": "affected",
                    "version": "7.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "VMware Cloud Foundation",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.x, 4.5.x"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "VMware Telco Cloud Platform",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.x, 4.x, 3.x, 2.x"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "VMware Telco Cloud Infrastructure",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "3.x, 2.x"
                  }
                ]
              }
            ],
            "source": "security@vmware.com"
          }
        ],
        "cisaActionDue": "2025-03-25",
        "cisaExploitAdd": "2025-03-04",
        "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
        "cisaVulnerabilityName": "VMware ESXi Arbitrary Write Vulnerability",
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "5CBA6B5A-F345-41D1-8AA0-E5F274A2D8FB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:*",
                    "matchCriteriaId": "F030A666-1955-438B-8417-5C294905399F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*",
                    "matchCriteriaId": "2C8DB7F6-5765-4355-B30E-9CAC39ECA5D9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*",
                    "matchCriteriaId": "A790D41E-B398-4233-9EC7-CF5BE2BC3161",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*",
                    "matchCriteriaId": "B7619C16-5306-4C4A-88E8-E80876635F66",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*",
                    "matchCriteriaId": "238E7AF4-722B-423D-ABB1-424286B06715",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*",
                    "matchCriteriaId": "1E4DE8C7-72FB-4BEC-AD9E-378786295011",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1e:*:*:*:*:*:*",
                    "matchCriteriaId": "2E6DE184-35C8-4A13-91D4-4B43E9F0168C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*",
                    "matchCriteriaId": "D3E3A02D-6C1E-4DE8-B845-60F53C056F32",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*",
                    "matchCriteriaId": "12D385F0-DB2B-4802-AD0E-31441DA056B9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*",
                    "matchCriteriaId": "2C202879-9230-4E1D-BAB8-4FB7CE4BBC24",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*",
                    "matchCriteriaId": "CC6DC107-5142-4155-A33B-D5BE72E9ED38",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2e:*:*:*:*:*:*",
                    "matchCriteriaId": "39817170-5C45-4F8A-916D-81B7352055DD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3:*:*:*:*:*:*",
                    "matchCriteriaId": "4ADC3CFF-7415-46A5-817A-2F053B261E8C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*",
                    "matchCriteriaId": "A2F831A7-544E-4B45-BA49-7F7A0234579C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*",
                    "matchCriteriaId": "80A0DD2E-F1CC-413B-91F9-E3986011A0A0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3e:*:*:*:*:*:*",
                    "matchCriteriaId": "C77771B2-BC64-47A5-B6DB-9CBCC4456B67",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3f:*:*:*:*:*:*",
                    "matchCriteriaId": "86DE9CE6-F6C0-47D2-B3AB-34852A8B9603",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3g:*:*:*:*:*:*",
                    "matchCriteriaId": "E75B2F03-702E-4359-9BB2-E234F1DC38C8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3i:*:*:*:*:*:*",
                    "matchCriteriaId": "ACAA9494-5248-4B01-8BC1-C38AB615FFD7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3j:*:*:*:*:*:*",
                    "matchCriteriaId": "BF12014B-BF2B-42EF-B70C-59CDA8E2176F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3k:*:*:*:*:*:*",
                    "matchCriteriaId": "F965D853-EE4A-41F5-840B-2D009ACC9754",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3l:*:*:*:*:*:*",
                    "matchCriteriaId": "BA7B7313-FF53-43C9-AF4D-B639053D3FA3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3m:*:*:*:*:*:*",
                    "matchCriteriaId": "9FB5738F-27E4-42C6-BD1B-F7F66A7EF0A6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3n:*:*:*:*:*:*",
                    "matchCriteriaId": "FC3668A6-262B-42BF-9E90-28BAA9BB3347",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3o:*:*:*:*:*:*",
                    "matchCriteriaId": "DA4E9185-44BA-41E6-8600-C8616E199334",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3p:*:*:*:*:*:*",
                    "matchCriteriaId": "F50302BB-B950-4178-A109-358393E0A50A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3q:*:*:*:*:*:*",
                    "matchCriteriaId": "BCCA4A31-1291-4FB4-9FA5-D2CCD086D660",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3r:*:*:*:*:*:*",
                    "matchCriteriaId": "78604FE5-510F-4979-B2E3-D36B3083224A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "7A1A402A-9262-4B97-A0B7-E5AE045E394D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*",
                    "matchCriteriaId": "FE44B379-9943-4DD1-8514-26F87482AFA8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*",
                    "matchCriteriaId": "2A797377-8945-4D75-AA68-A768855E5842",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*",
                    "matchCriteriaId": "79D84D76-54BE-49E9-905C-7D65B4B42D68",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*",
                    "matchCriteriaId": "2F8767F7-7C3D-457D-9EAC-E8A30796F751",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*",
                    "matchCriteriaId": "29AF8474-2D7A-4C5A-82B9-7A873AD90C2E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*",
                    "matchCriteriaId": "7781A2CA-D927-48CD-9932-AE42B7BA1EFE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1d:*:*:*:*:*:*",
                    "matchCriteriaId": "18FD08C9-5895-4BF4-BBE0-C2DDA5F6B836",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*",
                    "matchCriteriaId": "360C1B71-5360-4379-B0DE-63BB8F5E6DA2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2b:*:*:*:*:*:*",
                    "matchCriteriaId": "B16ED7C1-9881-452A-8BE0-EDDEAEFE3D7B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2c:*:*:*:*:*:*",
                    "matchCriteriaId": "ED92209F-FBD6-43F9-9A15-3842B139FCC9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_3:*:*:*:*:*:*",
                    "matchCriteriaId": "6B701151-1B57-4E2D-A9AB-586FACEA2385",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_3b:*:*:*:*:*:*",
                    "matchCriteriaId": "4230B9AA-9E0C-4AE2-814D-8DD641394879",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_3c:*:*:*:*:*:*",
                    "matchCriteriaId": "F2FA150B-93E4-44D2-BF6D-347085A95776",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vmware:cloud_foundation:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "31A7BB38-3238-413E-9736-F1A165D40867",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_infrastructure:2.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7E46A694-8698-4283-9E25-01F222B63E9A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_infrastructure:2.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "59B9476F-E5E7-46B6-AC38-4630D0933462",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_infrastructure:2.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9A045567-2563-4539-8E95-361087CB7762",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_infrastructure:3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D11103A7-6AB5-4E78-BE11-BC2A04A09F19",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:2.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C5F01D7-2675-4D09-B52B-B02D0EF52AEA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:2.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B5F8D61F-6E8B-4EE3-91DE-EBA6FF7D289E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:2.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B1E94D58-26A0-4E84-8CAD-F8CDB6707642",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FC33D39A-5760-467E-8284-F4E5D8082BBD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "448206AA-A023-4AA1-98FD-35BC2A2AB2B5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:4.0.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0F6E30F8-B977-40A5-9E45-89B5C5E59170",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D6B84F65-2E52-4445-8F97-2729B84B18E3",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "VMware ESXi contains an arbitrary write\u00a0vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox."
          },
          {
            "lang": "es",
            "value": "VMware ESXi contiene una vulnerabilidad de escritura arbitraria. Un actor malintencionado con privilegios dentro del proceso VMX puede activar una escritura arbitraria en el kernel que provoque un escape del entorno aislado."
          }
        ],
        "id": "CVE-2025-22225",
        "lastModified": "2026-08-04T05:16:33.493",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.5,
              "impactScore": 6.0,
              "source": "security@vmware.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.5,
              "impactScore": 6.0,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2025-22225",
                "options": [
                  {
                    "exploitation": "active"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-04T00:00:00+00:00",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2025-03-04T12:15:33.840",
        "references": [
          {
            "source": "security@vmware.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "US Government Resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22225"
          }
        ],
        "sourceIdentifier": "security@vmware.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-787"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Secondary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-123"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-03-27T08:51:05+00:00",
      "cve": "CVE-2025-22225",
      "id": "CVE-2025-22225",
      "initial_release_date": "2025-03-04T11:50:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2025-22225",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22225.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-22225",
                    "options": [
                      {
                        "Exploitation": "active"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-03-05T04:55:23.988843Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              },
              {
                "other": {
                  "content": {
                    "dateAdded": "2025-03-04",
                    "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22225"
                  },
                  "type": "kev"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-123",
                    "description": "CWE-123 Write-what-where Condition",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-03-04T13:48:26.628Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "government-resource"
                ],
                "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22225"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2025-03-04T00:00:00.000Z",
                "value": "CVE-2025-22225 added to CISA KEV"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "VMware ESXi",
              "vendor": "n/a",
              "versions": [
                {
                  "lessThan": "ESXi80U3d-24585383",
                  "status": "affected",
                  "version": "8.0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "ESXi80U2d-24585300",
                  "status": "affected",
                  "version": "8.0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "ESXi70U3s-24585291",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "VMware Cloud Foundation",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "5.x, 4.5.x"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "VMware Telco Cloud Platform",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "5.x, 4.x, 3.x, 2.x"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "VMware Telco Cloud Infrastructure",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "3.x, 2.x"
                }
              ]
            }
          ],
          "datePublic": "2025-03-04T11:50:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eVMware ESXi contains an \u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003earbitrary write\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003evulnerability.\u0026nbsp;\u003c/span\u003eA malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u003cbr\u003e\u003cbr\u003e\u003c/span\u003e\u003cbr\u003e"
                }
              ],
              "value": "VMware ESXi contains an arbitrary write\u00a0vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Arbitrary write vulnerability",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-03-04T11:56:27.537Z",
            "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
            "shortName": "vmware"
          },
          "references": [
            {
              "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "assignerShortName": "vmware",
        "cveId": "CVE-2025-22225",
        "datePublished": "2025-03-04T11:56:27.537Z",
        "dateReserved": "2025-01-02T04:29:59.190Z",
        "dateUpdated": "2026-08-04T03:55:46.011Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2025-AVI-0177

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer une exécution de code arbitraire, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.

VMware indique que les vulnérabilités CVE-2025-222234, CVE-2025-22225 et CVE-2025-22226 sont activement exploitées.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
VMware	Cloud Foundation	VMware Cloud Foundation versions 4.5.x sans le correctif de sécurité ESXi70U3s-24585291
VMware	Telco Cloud Platform	VMware Telco Cloud Platorm sans le correctif de sécurité KB389385
VMware	ESXi	VMware ESXi versions 7.0 sans le correctif de sécurité ESXi70U3s-24585291
VMware	Cloud Foundation	VMware Cloud Foundation versions 5.x sans le correctif de sécurité ESXi80U3d-24585383
VMware	Fusion	VMware Fusion 13.x versions antérieures à 13.6.3
VMware	ESXi	VMware ESXi versions 8.0 sans le correctif de sécurité ESXi80U2d-24585300 ou ESXi80U3d-24585383
VMware	Telco Cloud Infrastructure	VMware Telco Cloud Infrastructure versions 2.x et 3.x sans le correctif de sécurité KB389385
VMware	Workstation	VMware Workstation versions 17.x antérieures à 17.6.3

References

Title

Publication Time

CERTFR-2025-AVI-0177

Vulnerability from certfr_avis - Published: - Updated:

VMware indique que les vulnérabilités CVE-2025-222234, CVE-2025-22225 et CVE-2025-22226 sont activement exploitées.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
VMware	Cloud Foundation	VMware Cloud Foundation versions 4.5.x sans le correctif de sécurité ESXi70U3s-24585291
VMware	Telco Cloud Platform	VMware Telco Cloud Platorm sans le correctif de sécurité KB389385
VMware	ESXi	VMware ESXi versions 7.0 sans le correctif de sécurité ESXi70U3s-24585291
VMware	Cloud Foundation	VMware Cloud Foundation versions 5.x sans le correctif de sécurité ESXi80U3d-24585383
VMware	Fusion	VMware Fusion 13.x versions antérieures à 13.6.3
VMware	ESXi	VMware ESXi versions 8.0 sans le correctif de sécurité ESXi80U2d-24585300 ou ESXi80U3d-24585383
VMware	Telco Cloud Infrastructure	VMware Telco Cloud Infrastructure versions 2.x et 3.x sans le correctif de sécurité KB389385
VMware	Workstation	VMware Workstation versions 17.x antérieures à 17.6.3

References

Title

Publication Time

BDU:2025-02379 (CVE-2025-22225)

Vulnerability from fstec – Published: 2025-03-06 – Updated: 2025-03-06 – View on bdu.fstec.ru Exploit exists Yes Fixed

CISA Previdian

Title

Уязвимость гипервизора VMware ESXi, платформы виртуализации VMware Cloud Foundation, телекоммуникационной облачной платформы VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure, связанная с записью произвольного значения в любое произвольное место и переполнением буфера, позволяющая нарушителю оказать влияние на конфиденциальность, целостность и доступность защищаемой информации

Summary

Уязвимость гипервизора VMware ESXi, платформы виртуализации VMware Cloud Foundation, телекоммуникационной облачной платформы VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure связана с записью произвольного значения в любое произвольное место и переполнением буфера. Эксплуатация уязвимости может позволить нарушителю оказать влияние на конфиденциальность, целостность и доступность защищаемой информации

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

8.2 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Yes

Remediation

Software update

CWE

CWE-123 - Условие «запись-что-куда»

Aliases

CVE-2025-22225, VMSA-2025-0004

References

1 reference

URL
https://support.broadcom.com/web/ecx/support-content-notification/-/external/co…

Impacted products

4 products from 1 vendor

Vendors

Broadcom Inc.

Products

VMware ESXi, VMware Cloud Foundation, VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure

Versions

от 8.0 до ESXi80U3d-24585383 (VMware ESXi), от 8.0 до ESXi80U2d-24585300 (VMware ESXi), от 7.0 до ESXi70U3s-24585291 (VMware ESXi), от 5.0 до ESXi80U3d-24585383 (VMware Cloud Foundation), от 4.5.0 до ESXi70U3s-24585291 (VMware Cloud Foundation), от 5.0 до KB389385 (VMware Telco Cloud Platform), от 4.0 до KB389385 (VMware Telco Cloud Platform), от 3.0 до KB389385 (VMware Telco Cloud Platform), от 2.0 до KB389385 (VMware Telco Cloud Platform), от 3.0 до KB389385 (VMware Telco Cloud Infrastructure), от 2.0 до KB389385 (VMware Telco Cloud Infrastructure)

Product types

Virtualization software, Network software, Application software

Mitigations

Использование рекомендаций: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Broadcom Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u043e\u0442 8.0 \u0434\u043e ESXi80U3d-24585383 (VMware ESXi), \u043e\u0442 8.0 \u0434\u043e ESXi80U2d-24585300 (VMware ESXi), \u043e\u0442 7.0 \u0434\u043e ESXi70U3s-24585291 (VMware ESXi), \u043e\u0442 5.0 \u0434\u043e ESXi80U3d-24585383 (VMware Cloud Foundation), \u043e\u0442 4.5.0 \u0434\u043e ESXi70U3s-24585291 (VMware Cloud Foundation), \u043e\u0442 5.0 \u0434\u043e KB389385 (VMware Telco Cloud Platform), \u043e\u0442 4.0 \u0434\u043e KB389385 (VMware Telco Cloud Platform), \u043e\u0442 3.0 \u0434\u043e KB389385 (VMware Telco Cloud Platform), \u043e\u0442 2.0 \u0434\u043e KB389385 (VMware Telco Cloud Platform), \u043e\u0442 3.0 \u0434\u043e KB389385 (VMware Telco Cloud Infrastructure), \u043e\u0442 2.0 \u0434\u043e KB389385 (VMware Telco Cloud Infrastructure)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "04.03.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "06.03.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.03.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-02379",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-22225, VMSA-2025-0004",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "VMware ESXi, VMware Cloud Foundation, VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 VMware ESXi, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 VMware Cloud Foundation, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 \u043b\u044e\u0431\u043e\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0423\u0441\u043b\u043e\u0432\u0438\u0435 \u00ab\u0437\u0430\u043f\u0438\u0441\u044c-\u0447\u0442\u043e-\u043a\u0443\u0434\u0430\u00bb (CWE-123)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 VMware ESXi, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 VMware Cloud Foundation, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 \u043b\u044e\u0431\u043e\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-123",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,2)"
}

FKIE_CVE-2025-22225

Vulnerability from fkie_nvd - Published: 2025-03-04 12:15 - Updated: 2026-08-04 05:16

CISA Previdian

Severity

8.2 (High) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
8.2 (High) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Summary

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

References

	URL	Tags
	security@vmware.com	https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390	Vendor Advisory
	134c704f-9b21-4f2e-91b3-4a467353bcc0	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22225	US Government Resource

Impacted products

Vendor	Product	Version
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	cloud_foundation	-
vmware	telco_cloud_infrastructure	2.2
vmware	telco_cloud_infrastructure	2.5
vmware	telco_cloud_infrastructure	2.7
vmware	telco_cloud_infrastructure	3.0
vmware	telco_cloud_platform	2.0
vmware	telco_cloud_platform	2.5
vmware	telco_cloud_platform	2.7
vmware	telco_cloud_platform	3.0
vmware	telco_cloud_platform	4.0
vmware	telco_cloud_platform	4.0.1
vmware	telco_cloud_platform	5.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "VMware ESXi",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "ESXi80U3d-24585383",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "ESXi80U2d-24585300",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "ESXi70U3s-24585291",
              "status": "affected",
              "version": "7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VMware Cloud Foundation",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "5.x, 4.5.x"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VMware Telco Cloud Platform",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "5.x, 4.x, 3.x, 2.x"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VMware Telco Cloud Infrastructure",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "3.x, 2.x"
            }
          ]
        }
      ],
      "source": "security@vmware.com"
    }
  ],
  "cisaActionDue": "2025-03-25",
  "cisaExploitAdd": "2025-03-04",
  "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
  "cisaVulnerabilityName": "VMware ESXi Arbitrary Write Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "5CBA6B5A-F345-41D1-8AA0-E5F274A2D8FB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:*",
              "matchCriteriaId": "F030A666-1955-438B-8417-5C294905399F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*",
              "matchCriteriaId": "2C8DB7F6-5765-4355-B30E-9CAC39ECA5D9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*",
              "matchCriteriaId": "A790D41E-B398-4233-9EC7-CF5BE2BC3161",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*",
              "matchCriteriaId": "B7619C16-5306-4C4A-88E8-E80876635F66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*",
              "matchCriteriaId": "238E7AF4-722B-423D-ABB1-424286B06715",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*",
              "matchCriteriaId": "1E4DE8C7-72FB-4BEC-AD9E-378786295011",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1e:*:*:*:*:*:*",
              "matchCriteriaId": "2E6DE184-35C8-4A13-91D4-4B43E9F0168C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*",
              "matchCriteriaId": "D3E3A02D-6C1E-4DE8-B845-60F53C056F32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*",
              "matchCriteriaId": "12D385F0-DB2B-4802-AD0E-31441DA056B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*",
              "matchCriteriaId": "2C202879-9230-4E1D-BAB8-4FB7CE4BBC24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*",
              "matchCriteriaId": "CC6DC107-5142-4155-A33B-D5BE72E9ED38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2e:*:*:*:*:*:*",
              "matchCriteriaId": "39817170-5C45-4F8A-916D-81B7352055DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3:*:*:*:*:*:*",
              "matchCriteriaId": "4ADC3CFF-7415-46A5-817A-2F053B261E8C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*",
              "matchCriteriaId": "A2F831A7-544E-4B45-BA49-7F7A0234579C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*",
              "matchCriteriaId": "80A0DD2E-F1CC-413B-91F9-E3986011A0A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3e:*:*:*:*:*:*",
              "matchCriteriaId": "C77771B2-BC64-47A5-B6DB-9CBCC4456B67",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3f:*:*:*:*:*:*",
              "matchCriteriaId": "86DE9CE6-F6C0-47D2-B3AB-34852A8B9603",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3g:*:*:*:*:*:*",
              "matchCriteriaId": "E75B2F03-702E-4359-9BB2-E234F1DC38C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3i:*:*:*:*:*:*",
              "matchCriteriaId": "ACAA9494-5248-4B01-8BC1-C38AB615FFD7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3j:*:*:*:*:*:*",
              "matchCriteriaId": "BF12014B-BF2B-42EF-B70C-59CDA8E2176F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3k:*:*:*:*:*:*",
              "matchCriteriaId": "F965D853-EE4A-41F5-840B-2D009ACC9754",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3l:*:*:*:*:*:*",
              "matchCriteriaId": "BA7B7313-FF53-43C9-AF4D-B639053D3FA3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3m:*:*:*:*:*:*",
              "matchCriteriaId": "9FB5738F-27E4-42C6-BD1B-F7F66A7EF0A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3n:*:*:*:*:*:*",
              "matchCriteriaId": "FC3668A6-262B-42BF-9E90-28BAA9BB3347",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3o:*:*:*:*:*:*",
              "matchCriteriaId": "DA4E9185-44BA-41E6-8600-C8616E199334",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3p:*:*:*:*:*:*",
              "matchCriteriaId": "F50302BB-B950-4178-A109-358393E0A50A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3q:*:*:*:*:*:*",
              "matchCriteriaId": "BCCA4A31-1291-4FB4-9FA5-D2CCD086D660",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3r:*:*:*:*:*:*",
              "matchCriteriaId": "78604FE5-510F-4979-B2E3-D36B3083224A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "7A1A402A-9262-4B97-A0B7-E5AE045E394D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*",
              "matchCriteriaId": "FE44B379-9943-4DD1-8514-26F87482AFA8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*",
              "matchCriteriaId": "2A797377-8945-4D75-AA68-A768855E5842",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*",
              "matchCriteriaId": "79D84D76-54BE-49E9-905C-7D65B4B42D68",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*",
              "matchCriteriaId": "2F8767F7-7C3D-457D-9EAC-E8A30796F751",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*",
              "matchCriteriaId": "29AF8474-2D7A-4C5A-82B9-7A873AD90C2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*",
              "matchCriteriaId": "7781A2CA-D927-48CD-9932-AE42B7BA1EFE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1d:*:*:*:*:*:*",
              "matchCriteriaId": "18FD08C9-5895-4BF4-BBE0-C2DDA5F6B836",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*",
              "matchCriteriaId": "360C1B71-5360-4379-B0DE-63BB8F5E6DA2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2b:*:*:*:*:*:*",
              "matchCriteriaId": "B16ED7C1-9881-452A-8BE0-EDDEAEFE3D7B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2c:*:*:*:*:*:*",
              "matchCriteriaId": "ED92209F-FBD6-43F9-9A15-3842B139FCC9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_3:*:*:*:*:*:*",
              "matchCriteriaId": "6B701151-1B57-4E2D-A9AB-586FACEA2385",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_3b:*:*:*:*:*:*",
              "matchCriteriaId": "4230B9AA-9E0C-4AE2-814D-8DD641394879",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_3c:*:*:*:*:*:*",
              "matchCriteriaId": "F2FA150B-93E4-44D2-BF6D-347085A95776",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:cloud_foundation:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "31A7BB38-3238-413E-9736-F1A165D40867",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_infrastructure:2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E46A694-8698-4283-9E25-01F222B63E9A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_infrastructure:2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "59B9476F-E5E7-46B6-AC38-4630D0933462",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_infrastructure:2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A045567-2563-4539-8E95-361087CB7762",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_infrastructure:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D11103A7-6AB5-4E78-BE11-BC2A04A09F19",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C5F01D7-2675-4D09-B52B-B02D0EF52AEA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5F8D61F-6E8B-4EE3-91DE-EBA6FF7D289E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1E94D58-26A0-4E84-8CAD-F8CDB6707642",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC33D39A-5760-467E-8284-F4E5D8082BBD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "448206AA-A023-4AA1-98FD-35BC2A2AB2B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:4.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F6E30F8-B977-40A5-9E45-89B5C5E59170",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6B84F65-2E52-4445-8F97-2729B84B18E3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware ESXi contains an arbitrary write\u00a0vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox."
    },
    {
      "lang": "es",
      "value": "VMware ESXi contiene una vulnerabilidad de escritura arbitraria. Un actor malintencionado con privilegios dentro del proceso VMX puede activar una escritura arbitraria en el kernel que provoque un escape del entorno aislado."
    }
  ],
  "id": "CVE-2025-22225",
  "lastModified": "2026-08-04T05:16:33.493",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.5,
        "impactScore": 6.0,
        "source": "security@vmware.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.5,
        "impactScore": 6.0,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-22225",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-03-04T00:00:00+00:00",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-03-04T12:15:33.840",
  "references": [
    {
      "source": "security@vmware.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22225"
    }
  ],
  "sourceIdentifier": "security@vmware.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-123"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-2CXW-WGVV-24JJ

Vulnerability from github – Published: 2025-03-04 12:30 – Updated: 2025-10-22 00:33

Details

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

Severity

8.2 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-22225"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-123",
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-03-04T12:15:33Z",
    "severity": "HIGH"
  },
  "details": "VMware ESXi contains an arbitrary write\u00a0vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.",
  "id": "GHSA-2cxw-wgvv-24jj",
  "modified": "2025-10-22T00:33:13Z",
  "published": "2025-03-04T12:30:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22225"
    },
    {
      "type": "WEB",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22225"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

ICSA-25-077-02

Vulnerability from csaf_cisa - Published: 2025-03-18 06:00 - Updated: 2025-03-18 06:00

Summary

Rockwell Automation Lifecycle Services with VMware

Scope

3 vulnerabilities in this advisory, including CVE-2025-22225.

CVE-2025-22225

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Known affected: 5 products

https://support.broadcom.com/web/ecx/support-content-notifi… https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsph… https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsph…

Open the full advisory

NCSC-2025-0073

Vulnerability from csaf_ncscnl - Published: 2025-03-04 14:11 - Updated: 2025-03-04 14:11

Summary

Kwetsbaarheden verholpen in VMware producten

Scope

3 vulnerabilities in this advisory, including CVE-2025-22225.

CVE-2025-22225

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Known affected: 24 products

Open the full advisory

WID-SEC-W-2025-0480

Vulnerability from csaf_certbund - Published: 2025-03-03 23:00 - Updated: 2025-03-06 23:00

Summary

VMware ESXi: Mehrere Schwachstellen

Severity

Hoch

Scope

3 vulnerabilities in this advisory, including CVE-2025-22225.

CVE-2025-22225

Known affected: 7 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-22225 (GCVE-0-2025-22225)

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Confirmed Compromise Confidence: 70% Source: kevintel

Details

References

CERTFR-2025-AVI-0177

Solutions

CERTFR-2025-AVI-0177

Solutions

BDU:2025-02379 (CVE-2025-22225)

FKIE_CVE-2025-22225

GHSA-2CXW-WGVV-24JJ

ICSA-25-077-02

NCSC-2025-0073

WID-SEC-W-2025-0480

Tags

Sightings

Nomenclature

Related by attack behaviour