VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

Exploited in the wild. Listed by CISA on 2025-03-04; known to be used by ransomware.

1.6%likelihood of exploitation, next 30 days

76%of all CVEs are less likely

Nonecheck to confirm it

VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.

No ready check is stored for this CVE. Confirm it by hand from the references.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-22224

Use this check only on systems you are authorised to test. Where the data comes from