VYPR
← All advisories
Critical severity9.3CISA KEVNVD Advisory· Published Mar 4, 2025· Updated Jun 17, 2026

CVE-2025-22224

CVE-2025-22224

Description

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

63
  • VMware/Cloud Foundation2 versions
    cpe:2.3:a:vmware:cloud_foundation:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:cloud_foundation:-:*:*:*:*:*:*:*
    • (no CPE)range: 5.x, 4.5.x
  • VMware/Telco Cloud Infrastructure4 versions
    cpe:2.3:a:vmware:telco_cloud_infrastructure:2.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:vmware:telco_cloud_infrastructure:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:telco_cloud_infrastructure:2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:telco_cloud_infrastructure:2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:telco_cloud_infrastructure:3.0:*:*:*:*:*:*:*
  • VMware/Telco Cloud Platform8 versions
    cpe:2.3:a:vmware:telco_cloud_platform:2.0:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:vmware:telco_cloud_platform:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:telco_cloud_platform:2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:telco_cloud_platform:2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:telco_cloud_platform:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:telco_cloud_platform:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:telco_cloud_platform:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:telco_cloud_platform:5.0:*:*:*:*:*:*:*
    • (no CPE)range: 5.x, 4.x, 3.x, 2.x
  • VMware/Workstation3 versions
    cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*range: >=17.0,<17.6.3
    • (no CPE)
    • (no CPE)range: 17.x
  • VMware/Esxi45 versions
    cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*+ 44 more
    • cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1e:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_2e:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3e:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3f:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3g:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3i:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3j:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3k:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3l:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3m:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3n:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3o:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3p:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3q:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3r:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_1d:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_2b:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_2c:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_3:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_3b:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_3c:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 8.0
  • VMware/Infrastructurecpe-rescue
    Range: 3.x, 2.x

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.