---
title: "VMware: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/vmware/
description: "Every VMware vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (8), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2025-03-04
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# VMware: known exploited vulnerabilities

- 2025-03-04 [CVE-2025-22226](https://erroneo.us/security/cve/CVE-2025-22226/index.md) VMware ESXi, Workstation, and Fusion: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability (due 2025-03-25; ransomware: Unknown)
- 2025-03-04 [CVE-2025-22225](https://erroneo.us/security/cve/CVE-2025-22225/index.md) VMware ESXi: VMware ESXi Arbitrary Write Vulnerability (due 2025-03-25; ransomware: Known)
- 2025-03-04 [CVE-2025-22224](https://erroneo.us/security/cve/CVE-2025-22224/index.md) VMware ESXi and Workstation: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability (due 2025-03-25; ransomware: Unknown)
- 2024-11-20 [CVE-2024-38813](https://erroneo.us/security/cve/CVE-2024-38813/index.md) VMware vCenter Server: VMware vCenter Server Privilege Escalation Vulnerability (due 2024-12-11; ransomware: Unknown)
- 2024-11-20 [CVE-2024-38812](https://erroneo.us/security/cve/CVE-2024-38812/index.md) VMware vCenter Server: VMware vCenter Server Heap-Based Buffer Overflow Vulnerability (due 2024-12-11; ransomware: Unknown)
- 2024-07-30 [CVE-2024-37085](https://erroneo.us/security/cve/CVE-2024-37085/index.md) VMware ESXi: VMware ESXi Authentication Bypass Vulnerability (due 2024-08-20; ransomware: Known)
- 2024-07-17 [CVE-2022-22948](https://erroneo.us/security/cve/CVE-2022-22948/index.md) VMware vCenter Server: VMware vCenter Server Incorrect Default File Permissions Vulnerability  (due 2024-08-07; ransomware: Unknown)
- 2024-01-22 [CVE-2023-34048](https://erroneo.us/security/cve/CVE-2023-34048/index.md) VMware vCenter Server: VMware vCenter Server Out-of-Bounds Write Vulnerability (due 2024-02-12; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/vmware/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt