Vulnerabilities fixed in VMware products

🗓️ 04 Mar 2025 14:11:56Reported by NCSCType

Broadcom patches VMware vulnerabilities TOCTOU, arbitrary write, and info leak; CVE-2025-22226 exploited.

Reporter	Title	Published	Views	Family All 63
ATTACKERKB	CVE-2025-22224	4 Mar 202500:00	–	attackerkb
ATTACKERKB	CVE-2025-22226	4 Mar 202500:00	–	attackerkb
ATTACKERKB	CVE-2025-22225	4 Mar 202500:00	–	attackerkb
Information Security Automation	April “In the Trend of VM” (#14): vulnerabilities in Microsoft Windows, VMware products, Kubernetes, and Apache Tomcat	22 Apr 202521:16	–	avleonov
BDU FSTEC	The vulnerability of VMware ESXi and VMware Workstation relates to synchronization errors when using shared resources, allowing a hacker to execute arbitrary code.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the hypervisor in VMware ESXi, VMware Workstation, VMware Fusion, the virtualization platform VMware Cloud Foundation, the telecommunications cloud platform VMware Telco Cloud Platform, and VMware Telco Cloud Infrastructure—related to reading beyond the allowed range in memory, allowing an intruder to gain unauthorized access to protected information.	6 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware ESXi hypervisor, the VMware Cloud Foundation virtualization platform, the VMware Telco Cloud Platform telecommunications cloud platform, and the VMware Telco Cloud Infrastructure involves writing arbitrary values anywhere and overflowing buffers. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	6 Mar 202500:00	–	bdu_fstec
Circl	CVE-2025-22224	4 Mar 202512:31	–	circl
Circl	CVE-2025-22225	4 Mar 202512:31	–	circl
Circl	CVE-2025-22226	4 Mar 202512:31	–	circl