VMware ESXi contains an arbitrary write vulnerability (CWE-123) identified as CVE-2025-22225. The flaw allows a malicious actor with privileges inside the VMX process to perform an arbitrary kernel write, which may lead to sandbox escape. The vulnerability affects VMware ESXi versions 7.0 and 8.0. The CVSS 3.1 base score is 8.2, indicating high severity, with attack vector local, low attack complexity, high privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information provided at this time.

Successful exploitation of this vulnerability could allow an attacker with VMX process privileges to write arbitrary data to kernel memory, potentially escaping the VM sandbox and gaining elevated control over the host system. This could compromise confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the VMX process privileges and monitor for unusual activity related to VMware ESXi hosts.