{"id":325,"date":"2025-03-06T21:25:07","date_gmt":"2025-03-06T21:25:07","guid":{"rendered":"https:\/\/www.techrepublic.com\/?p=4295892"},"modified":"2025-03-06T21:25:07","modified_gmt":"2025-03-06T21:25:07","slug":"critical-zero-day-vulnerabilities-found-in-these-vmware-products","status":"publish","type":"post","link":"https:\/\/blog.tecnoartesanos.com\/index.php\/2025\/03\/06\/critical-zero-day-vulnerabilities-found-in-these-vmware-products\/","title":{"rendered":"Critical Zero-Day Vulnerabilities Found in These VMware Products"},"content":{"rendered":"
<\/div>\n

Broadcom has patched three actively exploited zero-day vulnerabilities in VMware ESXi, Workstation, and Fusion, discovered by Microsoft\u2019s Threat Intelligence Center. The flaws, which were being leveraged in real-world attacks at the time of discovery, could allow attackers with administrator or root access to a virtual machine to breach the underlying hypervisor, potentially exposing all connected VMs and sensitive data.<\/p>\n

<\/span>How do these vulnerabilities work?<\/span><\/h2>\n

If a threat actor gains administrative access to a virtual machine\u2019s guest OS, they can escalate privileges and break into the hypervisor. Once inside, they could manipulate or access other virtual machines running on the same hypervisor, posing a significant security risk.<\/p>\n

The three vulnerabilities are:<\/p>\n