workstation vulnerabilities and fixes

Recent CVEs affecting workstation, with upgrade or downgrade steps. 2 tracked.

workstation has 2 tracked vulnerabilities, 1 critical and 2 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 2. Most recent: 2025-03-04. Highest priority: CVE-2025-22224 (score 76/100).

• CVE-2025-22226 HIGH 7.1 EXPLOITED MITIGATE MITIGATE VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
• CVE-2025-22224 CRITICAL 9.3 EXPLOITED MITIGATE MITIGATE VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

FAQ

How do I fix workstation vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is workstation being exploited right now?

Yes: 2 workstation CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which workstation CVE should I patch first?

CVE-2025-22224 currently ranks highest (76/100): VMware ESXi and Workstation TOCTOU Race Condition Vulnerability.

← Back to latest CVEs