VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

Exploited in the wild. Listed by CISA on 2025-03-04; known to be used by ransomware.

1.6%likelihood of exploitation, next 30 days

77%of all CVEs are less likely

Nonecheck to confirm it

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process.

No ready check is stored for this CVE. Confirm it by hand from the references.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-22226

Use this check only on systems you are authorised to test. Where the data comes from