CVE-2025-22224: VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. (Update: proof of concept on GitHub published)

Update: proof of concept on GitHub published. VMware ESXi and VMware Workstation are affected by this vulnerability. A malicious user with local administrator access inside a virtual machine could exploit it to run code as the VMX process on the host system.