CVE-2024-22254

HIGH EXPLOITED RANSOMWARE

VMware ESXi - Out-of-bounds Write in VMX Process

Title source: llm

Exploitation Summary

CVE-2024-22254 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.

Description

VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.

References (1)

Core 1

Core References

Vendor Advisory

https://www.vmware.com/security/advisories/VMSA-2024-0006.html

Scores

CVSS v3 7.9

EPSS 0.0030

EPSS Percentile 53.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

VulnCheck KEV 2024-10-11

Ransomware Use Confirmed

CWE

CWE-787

Status published

Products (4)

vmware/cloud_foundation 4.0 - 5.0

vmware/esxi 7.0 (25 CPE variants)

vmware/esxi 7.0.0 b

vmware/esxi 8.0 (8 CPE variants)

Published Mar 05, 2024

Tracked Since Feb 18, 2026