High severity · published Mar 4, 2025
CVE-2025-22224
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
In wildKEV
8.2
CVSS
1.6%
EPSS
Yes
On KEV
Description
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 4, 2025
Federal remediation dueMar 25, 2025
Ransomware campaign useNot known
Affected products
Which versions
ES
ESXi · VMware
8.0 before ESXi80U3d-24585383; 8.0 before ESXi80U2d-24585300; 7.0 before ESXi70U3s-24585291 · source: vendor, NVD
TC
Telco Cloud Infrastructure · VMware
3.x, 2.x · source: vendor, NVD
TC
Telco Cloud Platform · VMware
5.x, 4.x, 3.x, 2.x · source: vendor, NVD
VC
VMware Cloud Foundation · VMware
5.x, 4.5.x · source: vendor
WO
Workstation · VMware
17.x before 17.6.3 · source: vendor, NVD
CF
Cloud Foundation · Vmware
All versions, or not specified · source: NVD
EA
ESXi and Workstation · VMware
All versions, or not specified · source: KEV
Affected product
ES
ESXi
VMware
More from ESXi
9.8
CVE-2020-3992
VMware ESXi OpenSLP Use-After-Free Vulnerability
9.8
CVE-2019-5544
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
8.2
CVE-2025-22225
VMware ESXi Arbitrary Write Vulnerability
7.8
CVE-2010-3904
Linux Kernel Improper Input Validation Vulnerability
7.5
CVE-2023-29552
Service Location Protocol (SLP) Denial-of-Service Vulnerability