CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-03-04
VMware ESXi and Workstation TOCTOU Out-of-Bounds Write Vulnerability (CVE-2025-22224) Analysis and Mitigation Guide
[Affected Scope] VMware ESXi and Workstation products
[Impact] A malicious actor with local administrative privileges on a guest VM can execute arbitrary code within the host's VMX process, leading to a virtual machine escape
[Mitigation] Apply the latest security patches provided by Broadcom and restrict administrative access within guest virtual machines