Over 37,000 VMware ESXi servers vulnerable to ongoing attacks

BleepingComputer

Center

Factuality

Ownership

Over 37,000 VMware ESXi servers vulnerable to ongoing attacks

Over 37,000 internet-exposed VMware ESXi instances are vulnerable to CVE-2025-22224, a critical out-of-bounds write flaw that is actively exploited in the wild.

Cybersecurity Dive

Center

Factuality

Ownership

Broadcom urges customers to patch 3 zero-day VMware flaws

Cyberattackers with administrative access are actively exploiting vulnerabilities in ESXi, Workstation and Fusion products.

Information Security Buzz

Factuality

Ownership

Broadcom Warns VMware Users Of Critical Zero-Day Exploits

Broadcom has issued a security alert warning VMware customers about three zero-day vulnerabilities attackers are actively exploiting in the wild. The flaws – CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226 – impact VMware ESX products, including VMware ESXi, vSphere, Workstation, Fusion, Cloud Foundation, and Telco Cloud Platform.  The VMware Nightmare: What You Need to Know  Broadcom’s advisory states [...]

winfuture.de

Factuality

Ownership

Germany ranks fourth among the countries most affected by the new VMware security systems. More than 2500 vulnerable servers are available in this country. The critical vulnerabilities allow attackers to escape from VMs. (Read more)

golem.de

Factuality

Ownership

Three security devices cause a stir in several VMware products. Hackers can break out of VMs and cause immense damage. (Sicherheitlcke, Virtualisierung)

unsafe.sh

Factuality

Ownership

Broadcom releases emergency patch to fix VMware security vulnerability