3 different VMware zero days, under active exploitation by ransomware groups CVE-2025-22224, CVE-2025-22225, CVE-2025-22226 VMware ESXi VMware Workstation Pro / Player (Workstation) VMware Fusion VMware Cloud Foundation VMware Telco Cloud Platform (Exploitation actually ESXi) […] - ThreadSky

About ThreadSky

GossiTheDog.cyberplace.social.ap.brid.gy • 41 days ago

3 different VMware zero days, under active exploitation by ransomware groups

CVE-2025-22224, CVE-2025-22225, CVE-2025-22226

VMware ESXi
VMware Workstation Pro / Player (Workstation)
VMware Fusion
VMware Cloud Foundation
VMware Telco Cloud Platform

(Exploitation actually ESXi) […]

Comments

GossiTheDog.cyberplace.social.ap.brid.gy•41 days ago

Unclear if related to this post from a few weeks ago.

GossiTheDog.cyberplace.social.ap.brid.gy•41 days ago

You may want to escalate patching this as it allows virtual machine to hypervisor escape - e.g. from some dumb VM to the whole VMware private cloud estate.

GossiTheDog.cyberplace.social.ap.brid.gy•41 days ago

VMware have set the Attack Vector to Local, which brings down the CVSS score - but you don't need to be locally at a VM to do the attack, you can do it over the internet if you have access to any VM.

If you change it to Network, you get 10

GossiTheDog.cyberplace.social.ap.brid.gy•41 days ago

VMware ESXi vulns added to CISA KEV.

GossiTheDog.cyberplace.social.ap.brid.gy•41 days ago

Good catch by https://infosec.exchange/@TomSellers - although VMware doesn't list ESXi 6.7 as vulnerable, it is - they've published a patch for it: https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/6-7/release-notes/esxi-update-and-patch-release-notes/vmware-esxi-67-patch-release-esxi670202503001.html

I […]

GossiTheDog.cyberplace.social.ap.brid.gy•41 days ago

Another good catch by @TomSellers - VMware's website advisory has less detail than their github for some reason.

Their github: https://github.com/vmware/vcf-security-and-compliance-guidelines/tree/main/security-advisories/vmsa-2025-0004

According to their Github, additional VMware ESXi […]

drgoon.bsky.social•41 days ago

Saw that just after you posted, had to run off and pull some alarms. Thanks.

Posting Rules

Be respectful to others
No spam or self-promotion
Stay on topic
Follow Bluesky's terms of service

Comments

Posting Rules

Reply