VMware fixed four vulnerabilities in VMware ESXi, Workstation, Fusion, and Tools that were exploited as zero-days during the Pwn2Own Berlin 2025 hacking contest in May 2025. These vulnerabilities were demonstrated as zero-days during the Pwn2Own Berlin 2025 hacking contest, where security researchers collected $1,078,750 after exploiting 29 zero-day vulnerabilities. This free, editable board report deck helps security leaders present risk, impact, and priorities in clear business terms. Lawrence Abrams Lawrence Abrams is the owner and Editor in Chief of BleepingComputer.com. Lawrence's area of expertise includes Windows, malware removal, and computer forensics. CISOs know that getting board buy-in starts with a clear, strategic view of how cloud security drives business value. Lawrence Abrams is a co-author of the Winternals Defragmentation, Recovery, and Administration Field Guide and the technical editor for Rootkits for Dummies. It should be noted that CVE-2025-41239 impacts VMware Tools for Windows, which requires a different upgrade process. Three of the patched flaws have a severity rating of 9.3, as they allow programs running in a guest virtual machine to execute commands on the host.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Thu, 17 Jul 2025 21:40:19 +0000