erroneo.us
Search all guides⌘K

Digest · Tuesday

Security digest: March 4, 2025

4 known exploited (cisa kev) additions and 1 critical advisory.

All digests · RSS · Markdown

Take stock

  • Do you run any of these? VMware ESXi, Workstation, and Fusion, VMware ESXi, VMware ESXi and Workstation, Linux Kernel. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-03-25.
  • Go: 1 critical advisory (github.com/zitadel/zitadel/v2, github.com/zitadel/zitadel). Check with govulncheck ./....
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Known exploited (CISA KEV) 4

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

CVEProduct and flawCISA due
CVE-2025-22226VMware ESXi, Workstation, and Fusion
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability		2025-03-25
CVE-2025-22225VMware ESXi
VMware ESXi Arbitrary Write Vulnerability Ransomware		2025-03-25
CVE-2025-22224VMware ESXi and Workstation
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability		2025-03-25
CVE-2024-50302Linux Kernel
Linux Kernel Use of Uninitialized Resource Vulnerability		2025-03-25

Critical advisories by ecosystem 1

GitHub-reviewed advisories rated critical, published this day (Pacific time).

Go 1

Check: govulncheck ./...