sign in--:--:--UTC

CVE-2025-22225

exploited in the wild☆ pin

CVSS

8.2

Reports

4

First seen

Mar 6, 2025

Last seen

Sep 15, 2026

Affected product

VMware ESXi 7.0/8.0, Workstation 17.x, Cloud Foundation 4.5.x, Telco Cloud Platform

Associated actors

Ransomware gangs (unidentified) ×1 Unknown APT actor ×1

Recent reports

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

Bleeping ComputerSep 15, 2026 Critical

ESXi Exploitation in the Wild: MAESTRO VM Escape Toolkit Analysis

Huntress BlogJan 7, 2026 High

VMware Sandbox Escape Vulnerabilities CVE-2025-22224 and CVE-2025-22225 Require Immediate Patching

NICS TaiwanMar 7, 2025 Critical

High Threat Security Alert: Multiple Vulnerabilities in VMware Products Being Exploited

GovCERT.HKMar 6, 2025

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans