7.1
Élevée
CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-125
Description
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ESXi 8.0 | 8.0 → dernières | Pas de correctif indiqué |
| ESXi 7.0 | 7.0 → dernières | Pas de correctif indiqué |
| VMware Workstation 17 | 17.x → < 17.6.3 | 17.6.3 |
| VMware Fusion 13 | 13.x → < 13.6.3 | 13.6.3 |
| VMware Cloud Foundation | Versions non publiées | |
| VMware Telco Cloud Platform | Versions non publiées | |
| VMware Telco Cloud Infrastructure | Versions non publiées |