Threat intelligence / Vulnerability
CVE-2025-22224
VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.
Vulnerability
TypeVulnerability
External ID—
First seen2025-03-04
Last seen2025-03-04
Confidence
—
VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.
Labels
CISA KEV context
Vendor / productVMware ESXi and Workstation
Added2025-03-04
Due date2025-03-25
3 recorded
Relationships
2 external