CVE-2025-22225

A critical arbitrary write vulnerability in VMware ESXi allows sandbox escapes and is actively exploited by ransomware.

VMware ESXi's arbitrary write flaw lets attackers with VMX process privileges trigger kernel writes, breaking the sandbox and enabling system escapes. This is a severe, avoidable failure because it is actively exploited in the wild and linked to ransomware, directly threatening DIB environments that rely on virtualization for secure workloads. Organizations must immediately patch ESXi and restrict VMX process access to prevent exploitation.

Shame score — A critical, actively exploited vulnerability in a foundational virtualization platform linked to ransomware demonstrates severe negligence and a massive exposure to DIB systems.