CISA's list that day
4 March 2025
On CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in Linux Kernel, VMware ESXi and Workstation, VMware ESXi and 1 other product. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2025-22225Arbitrary Write | VMware ESXi | Patch this weekRansomware use | 0.01 | ||
| CVE-2025-22226Information Disclosure | VMware ESXi, Workstation, and Fusion | Patch soon | 0.02 | ||
| CVE-2025-22224TOCTOU Race Condition | VMware ESXi and Workstation | Patch soon | 0.02 | ||
| CVE-2024-50302Use of Uninitialized Resource | Linux Kernel | Patch soon | 0.01 |