FAIL › dossier
ESXi
PRODUCT· dossier confidence 50%
VMware ESXi, a virtualization platform, has experienced multiple critical security failures, including RCE vulnerabilities that are actively exploited.
PROFILE
CategoryVMware ESXiWhat they doVMware ESXi is a virtualization platform that provides virtualization services for x86 hardware.
SECURITY POSTURE
The company has faced multiple critical vulnerabilities in ESXi, indicating potential weaknesses in their security posture.
Notable failures
- CVE-2025-22225: Arbitrary write vulnerability leading to sandbox escapes and active exploitation by ransomware
- CVE-2024-37085: Attackers with AD permissions could regain full host access by recreating a deleted admin group
- CVE-2020-3992: OpenSLP service use-after-free vulnerability linked to ransomware activity
Patterns: Repeated critical remote code execution (RCE) vulnerabilities; Lack of timely patching and network segmentation improvements
FAILURE HISTORY · 4
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2025-03-04 | CVE-2025-22225 | critical | A critical arbitrary write vulnerability in VMware ESXi allows sandbox escapes and is actively exploited by ransomware. |
| 2024-07-30 | CVE-2024-37085 | critical | VMware ESXi allows attackers with AD permissions to regain full host access by recreating a deleted admin group. |
| 2021-11-03 | CVE-2020-3992 | critical | VMware ESXi's OpenSLP service had a remotely exploitable use-after-free vulnerability linked to ransomware activity, requiring immediate patching and network segmentation review. |
| 2020-10-20 | CVE-2020-3992 | critical | CVE-2020-3992: OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before E |
Open questions: How has VMware addressed the noted security failures? · What is the current security posture of VMware ESXi? · Are there any recent updates or patches addressing the vulnerabilities?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-07-25 03:46:55.267834+00:00