THREATOPS
THREAT OPSCVEs › CVE-2025-22225

CVE-2025-22225 — VMware ESXi Arbitrary Write Vulnerability

CISA KEVExploited: confirmedVMware

VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.

Vulnerability details