https://pwn.watch/i/vmware-esxi-and-workstation-cve-2025-22224 VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host. Added to CISA KEV on 2025-03-04. en Tue, 04 Mar 2025 00:00:00 GMT https://pwn.watch/i/vmware-esxi-and-workstation-cve-2025-22224 https://pwn.watch/i/vmware-esxi-and-workstation-cve-2025-22224#2025-03-04-9fac1627 Tue, 04 Mar 2025 00:00:00 GMT critical <p>VMware ESXi and Workstation: ESXi and Workstation TOCTOU Race Condition Vulnerability: CISA added CVE-2025-22224 to the KEV catalog (due 2025-03-25).</p>