MEDIUM CISA KEV

CVE-2025-22226

CVSS v3

6

MEDIUM

EPSS Score

6.7%

exploit probability

CISA KEV

Yes

known exploited

Exploitation

SSVC status

Description

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.

CISA Known Exploited Vulnerability

Date Added
3/4/2025
Patch Due Date
3/25/2025
Ransomware Use
Unknown

Technical details

Published
3/4/2025

Frequently asked questions

What is CVE-2025-22226?

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.

Is CVE-2025-22226 actively exploited?

Yes. CVE-2025-22226 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 3/25/2025.

What is the CVSS score for CVE-2025-22226?

CVE-2025-22226 has a CVSS v3 base score of 6 (MEDIUM severity).

Is CVE-2025-22226 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.