High severity7.1CISA KEVNVD Advisory· Published Mar 4, 2025· Updated Jun 17, 2026
CVE-2025-22226
CVE-2025-22226
Description
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
60- cpe:2.3:a:vmware:cloud_foundation:-:*:*:*:*:*:*:*
cpe:2.3:a:vmware:telco_cloud_infrastructure:2.2:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:vmware:telco_cloud_infrastructure:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:telco_cloud_infrastructure:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:telco_cloud_infrastructure:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:telco_cloud_infrastructure:3.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:telco_cloud_platform:2.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:vmware:telco_cloud_platform:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:telco_cloud_platform:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:telco_cloud_platform:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:telco_cloud_platform:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:telco_cloud_platform:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:telco_cloud_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:telco_cloud_platform:5.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*range: >=17.0,<17.6.3
- (no CPE)
cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*+ 43 more
- cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1e:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2e:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3e:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3f:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3g:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3i:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3j:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3k:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3l:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3m:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3n:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3o:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3p:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3q:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3r:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:update_1d:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:update_2b:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:update_2c:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:update_3:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:update_3b:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:8.0:update_3c:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
2- support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.