CISA Confirms VMware ESXi 0

Gbhackers •Divya • February 5, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical vulnerability affecting VMware ESXi to its Known Exploited Vulnerabilities (KEV) catalog. Tracked as CVE-2025-22225, this zero-day flaw allows attackers to escape security sandboxes. It is currently being leveraged in active ransomware operations. Technical Analysis of CVE-2025-22225 The vulnerability is classified as an arbitrary write memory […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Confirms Active Exploitation of VMware ESXi CVE-2025-22225 CISA has confirmed the active exploitation of a critical vulnerability in VMware ESXi, tracked as CVE-2025-22225. This zero-day flaw allows attackers to escape security sandboxes and is currently being used in ransomware operations. The vulnerability, classified as an arbitrary write memory issue, was added to CISA's Known Exploited Vulnerabilities catalog on March 4, 2025. 7 sources 20

Extracted Entities

CISA Confirms VMware ESXi 0

The full story

Extracted Entities

Attack Types (2)

CVEs (1)

Platforms (1)