CISA Warns of VMware ESXi 0

Cybersecuritynews •Guru Baran • February 5, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently confirmed that ransomware groups are actively exploiting CVE-2025-22225, a high-severity VMware ESXi sandbox escape vulnerability. This flaw, patched by Broadcom in March 2025, enables attackers to escape virtual machine isolation and deploy ransomware across hypervisors. CVE-2025-22225 is an arbitrary write vulnerability in VMware ESXi, rated Important […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Confirms Active Exploitation of VMware ESXi CVE-2025-22225 CISA has confirmed the active exploitation of a critical vulnerability in VMware ESXi, tracked as CVE-2025-22225. This zero-day flaw allows attackers to escape security sandboxes and is currently being used in ransomware operations. The vulnerability, classified as an arbitrary write memory issue, was added to CISA's Known Exploited Vulnerabilities catalog on March 4, 2025. 7 sources 20

Extracted Entities

CISA Warns of VMware ESXi 0

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)