CVE-2025-22225 — HIGH (8.2)

Vulnerability Description

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

CVSS Score

8.2

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Vmware	Esxi	7.0
Vmware	Cloud Foundation	-
Vmware	Telco Cloud Infrastructure	2.2
Vmware	Telco Cloud Platform	2.0

Related Weaknesses (CWE)

CWE-123 CWE-787

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/conVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-US Government Resource

FAQ

What is CVE-2025-22225?

CVE-2025-22225 is a vulnerability with a CVSS score of 8.2 (HIGH). VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

How severe is CVE-2025-22225?

CVE-2025-22225 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-22225?

Check the references section above for vendor advisories and patch information. Affected products include: Vmware Esxi, Vmware Cloud Foundation, Vmware Telco Cloud Infrastructure, Vmware Telco Cloud Platform.