New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Critical VMware Vulnerabilities (9.3)
Newest vulnerabilities allow code running inside a VM to escape the sandbox and access the hypervisor.
A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
- CVE-2025-22224, a heap overflow in the Virtual Machine Communication Interface, with a severity rating of 9.3 out of a possible 10
- CVE-2025-22225, an arbitrary write vulnerability, with a severity of 8.2
- CVE-2025-22226, an information-disclosure vulnerability in the host-guest file system, with a severity of 7.1
VMware warned Tuesday that it has evidence suggesting the vulnerabilities are already under active exploitation in the wild.
