Introduction On March 4, 2025, Broadcom issued VMSA-2025-0004, disclosing actively exploited vulnerabilities in VMware ESXi, Workstation, and Fusion. CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226 allow attackers to escape virtual machines, execute arbitrary code on the host, and exfiltrate sensitive data. These threats pose a critical risk to cloud and enterprise environments where VMware hypervisors are foundational. Organizations must act immediately to patch affected
