Database/Kernel, userspace & hypervisor
VMware ESXi / Workstation / Fusion: Out-of-bounds read in HGFS leaks vmx process memory to the guest
CVSS 7.1CVE-2025-22226Kernel, userspace & hypervisorKnown exploitedcurated
Impact
Out-of-bounds read in HGFS leaks vmx process memory to the guest [KEV]
Who can reach it
Tenant VM guest (local admin inside the VM)
What to do
ESXi patch + host reboot with evacuation
References
Related entries
- VMware ESXi / Workstation / Fusion: Use-after-free in the XHCI USB controllerCVE-2024-22252 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Use-after-free in the UHCI USB controllerCVE-2024-22253 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Integer overflow in the VMXNET3 virtual NICCVE-2025-41236 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Integer underflow in VMCI leading to an out-of-bounds writeCVE-2025-41237 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Heap overflow in the PVSCSI controllerCVE-2025-41238 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Heap out-of-bounds write in the USB 2.0 EHCI controllerCVE-2022-31705 · VMware ESXi / Workstation / FusionHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.