VMWare Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in VMware products. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, sensitive information disclosure and data manipulation on the targeted system.

Note: CVE-2025-22224, CVE-2025-22225 and CVE-2025-22226 are actively exploited in the wild. 

For CVE-2025-22224, a malicious actor with local administrative privileges may trigger this vulnerability to execute code as the virtual machine's VMX process running on the host.

For CVE-2025-22225, a malicious actor with privileges may trigger an arbitrary kernel write leading to an escape of the sandbox.

For CVE-2025-22226, a malicious actor with administrative privileges may trigger this vulnerability to leak memory from the vmx process.