Skip to content
VulniPulse
Sign in
High8.2VMware (Broadcom) Exploited CISA KEV

High [CVE-2025-22225] VMware ESXi contains an arbitrary write vulnerability

This high-severity VMware (Broadcom) advisory covers CVE-2025-22225 affecting VMware ESXi, VMware Cloud Foundation, VMware Telco Cloud Platform.

CVE-2025-22225 Published Mar 4, 2025Updated by vendor Aug 4, 2026
CVE-2025-22225
Affected products & platforms
VMware (Broadcom)ESXiCloud Foundation
Open vendor advisory

Android app · Google Play

Monitor future VMware (Broadcom) CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

Affected products named by the advisory: VMware Cloud Foundation; VMware Telco Cloud Platform; VMware Telco Cloud Infrastructure.

CISA Known Exploited Vulnerability

Listed:
Mar 4, 2025 · federal remediation due Mar 25, 2025
Required action:
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Ransomware use:
Known

KEV is a prioritization signal from CISA — remediation detail still comes from the vendor advisory.

Affected versions
  • VMware ESXi 8.0 before ESXi80U3d-24585383
  • VMware ESXi 8.0 before ESXi80U2d-24585300
  • VMware ESXi 7.0 before ESXi70U3s-24585291
  • VMware Cloud Foundation 5.x, 4.5.x
  • VMware Telco Cloud Platform 5.x, 4.x, 3.x, 2.x
  • VMware Telco Cloud Infrastructure 3.x, 2.x

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Fixed versions
  • ESXi80U3d-24585383
  • ESXi80U2d-24585300
  • ESXi70U3s-24585291

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Mitigation

Upgrade to a fixed release: ESXi80U3d-24585383, ESXi80U2d-24585300, ESXi70U3s-24585291. That is the remediation for this advisory.

The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.