Broadcom Warns of ESXi, Workstation, and Fusion Zero-Day Vulnerabilities – Australian Cyber Security Magazine

Broadcom published a critical security advisory (VMSA-2025-0004) on March 4, 2025, about three new zero-day vulnerabilities affecting multiple VMware products, including ESXi, Workstation, and Fusion.

The most severe of the vulnerabilities is CVE-2025-22224, a critical vulnerability in ESXi and Workstation. Notably, these are not remotely exploitable vulnerabilities – they require an attacker to have existing privileged access on a VM that is running on an affected VMware hypervisor.

The…