--- title: Broadcom Releases Urgent Patches for Critical VMware... description: Broadcom has issued critical patches for three actively exploited zero-day vulnerabilities in VMware ESXi, Workstation, and Fusion. These vulnerabilities,... canonical: https://daily.dev/posts/broadcom-releases-urgent-patches-for-critical-vmware-security-flaws-4ddwglged twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Broadcom Releases Urgent Patches for Critical VMware Security Flaws | daily.dev og:description: Broadcom has issued critical patches for three actively exploited zero-day vulnerabilities in VMware ESXi, Workstation, and Fusion. These vulnerabilities,... og:url: https://daily.dev/posts/broadcom-releases-urgent-patches-for-critical-vmware-security-flaws-4ddwglged og:image: https://api.daily.dev/og/posts/4dDwglGED.png og:image:alt: Broadcom Releases Urgent Patches for Critical VMware Security Flaws og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Broadcom Releases Urgent Patches for Critical VMware Security Flaws **[Collections](https://daily.dev/sources/collections)** · 2 min read · 0 upvotes · 0 comments ## Summary Broadcom has issued critical patches for three actively exploited zero-day vulnerabilities in VMware ESXi, Workstation, and Fusion. These vulnerabilities, identified as CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226, enable attackers to execute arbitrary code and escape virtual machine sandboxes, posing significant risks. Given their severity, with a CVSS score of 9.3, immediate patch application is essential to protect against potential widespread breaches. ## Content # Broadcom Releases Emergency Patches for Actively Exploited VMware Zero-Days Broadcom has urgently issued critical patches for three actively exploited zero-day vulnerabilities discovered in VMware ESXi, Workstation, and Fusion products. Discovered by Microsoft, these vulnerabilities allow attackers with certain privileges to perform malicious activities such as code execution, arbitrary writes, and memory leaks. The most severe of these vulnerabilities carries a CVSS score of 9.3. ## Vulnerabilities Overview The vulnerabilities, identified as CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226, pose significant risks to VMware environments. These flaws enable threat actors to escape a virtual machine's sandbox and escalate their privileges to the ESX hypervisor. This can potentially expose all virtual machine data, ESX configurations, and mounted storage, leading to widespread breaches in multi-tenant and cloud environments. ## Active Exploitation and Risks Known collectively as `ESXicape`, these vulnerabilities are being actively exploited in the wild. Attackers are leveraging these flaws to gain unauthorized access to multiple virtual machines through a single compromised hypervisor. Such attacks, known as hyperjacking, are particularly dangerous as they threaten the control and security of entire virtualized environments. Given the severity of these vulnerabilities, Broadcom and the U.S. cybersecurity agency CISA have issued urgent advisories for users to apply the patches immediately. Organizations using VMware products must update to the latest patched versions to mitigate the risk of severe security breaches. ## Mitigation Measures VMware users, particularly those managing large-scale and multi-tenant setups, should prioritize the following steps: 1. **Upgrade Immediately:** Apply the latest patches provided by Broadcom to all affected VMware products including ESXi, Workstation, and Fusion. 2. **Review Security Posture:** Assess and review current security measures to ensure robustness against similar vulnerabilities in the future. 3. **Monitoring and Alerts:** Implement continuous monitoring and configure alerts for any unusual activities within virtual environments. ## Conclusion The potential impact of these critical VMware vulnerabilities cannot be overstated. Prompt action to apply patches and reinforce security protocols is essential to protect against the ongoing exploitation of these zero-day vulnerabilities. Organizations must stay vigilant and proactive in their cybersecurity measures to safeguard their virtualized infrastructures. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cloud](https://daily.dev/tags/cloud), [#cyber](https://daily.dev/tags/cyber), [#vmware](https://daily.dev/tags/vmware) [View this post on daily.dev](https://daily.dev/posts/broadcom-releases-urgent-patches-for-critical-vmware-security-flaws-4ddwglged) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Broadcom Releases Urgent Patches for Critical VMware Security Flaws","url":"https://daily.dev/posts/broadcom-releases-urgent-patches-for-critical-vmware-security-flaws-4ddwglged","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/broadcom-releases-urgent-patches-for-critical-vmware-security-flaws-4ddwglged"},"datePublished":"2025-03-04T19:53:29.556Z","dateModified":"2025-03-07T18:29:25.239Z","description":"Broadcom has issued critical patches for three actively exploited zero-day vulnerabilities in VMware ESXi, Workstation, and Fusion. These vulnerabilities,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5851c530f4fdf0c3a7f975bce9aa794e?_a=AQAEuj9","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5851c530f4fdf0c3a7f975bce9aa794e?_a=AQAEuj9","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/broadcom-releases-urgent-patches-for-critical-vmware-security-flaws-4ddwglged","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cloud,cyber,vmware","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Broadcom Releases Urgent Patches for Critical VMware Security Flaws"}]} ```