CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability. VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.
- CISA KEV-listed (remediation due 2025-03-25)
- EPSS 46.8% (97.7% percentile)