NCSC-2025-0073

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in VMware producten

view advisory published 2025-03-04

Broadcom heeft kwetsbaarheden verholpen in VMware ESXi (inclusief Workstation en Fusion).

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2025-22226USmedium6.0OT criticalKEV
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a vir…
CVE-2025-22225UShigh8.2OT criticalKEV
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sa…
CVE-2025-22224UShigh8.2OT criticalKEV
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan