VMware ESXi, Workstation, and Fusion: ESXi, Workstation, and Fusion Information Disclosure Vulnerability ยท updates https://pwn.watch/i/vmware-esxi-workstation-and-fusion-cve-2025-22226 VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process. Added to CISA KEV on 2025-03-04. en Tue, 04 Mar 2025 00:00:00 GMT VMware ESXi, Workstation, and Fusion: ESXi, Workstation, and Fusion Information Disclosure Vulnerability: CISA added CVE-2025-22226 to the KEV catalog (due 2025-03-25). https://pwn.watch/i/vmware-esxi-workstation-and-fusion-cve-2025-22226 https://pwn.watch/i/vmware-esxi-workstation-and-fusion-cve-2025-22226#2025-03-04-1b556471 Tue, 04 Mar 2025 00:00:00 GMT high <p>VMware ESXi, Workstation, and Fusion: ESXi, Workstation, and Fusion Information Disclosure Vulnerability: CISA added CVE-2025-22226 to the KEV catalog (due 2025-03-25).</p>