Broadcom urges VMware customers to patch ‘emergency’ zero-day bugs under active exploitation

image via TechCrunch

March 5, 2025, 2:53 PM

• •Broadcom warns that a trio of VMware vulnerabilities are being actively exploited by malicious hackers
• •The vulnerabilities could allow an attacker with administrator or root privileges on a virtual machine to escape its protected sandbox and gain broader unauthorized access to the underlying hypervisor product
• •Broadcom has released patches for the three vulnerabilities, which are classed as “zero-day” bugs due to the fact they were exploited before a fix was made available

U.S. technology giant Broadcom is warning that a trio of VMware vulnerabilities are being actively exploited by malicious hackers to compromise the networks of its corporate customers. The three vulnerabilities — collectively dubbed “ESXicape” by one security researcher — affect VMware ESXi, Workstation, and Fusion, which are widely-used software hypervisor products that allow multiple virtual machines to be managed on a single server. Hypervisors are commonly used to reduce the need to take up physical server space.

Read original article