NVD disclosure day
CVE-2025-22226
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
VMware products can leak system memory if an attacker with administrative privileges in a virtual machine exploits a flaw in HGFS. This impacts data confidentiality and presents a business risk by potentially exposing sensitive information.
CVE-2025-22225
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
VMware ESXi has a vulnerability that allows an attacker with internal privileges to write to the kernel, potentially escaping the sandbox. This impacts VMware ESXi systems, risking data and system control. The business risk is elevated due to observed exploitation.
CVE-2025-22224
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in VMware ESXi and Workstation allows a malicious actor with local administrative privileges within a virtual machine to execute code on the host system. This could impact host systems and data, posing a business risk.
CVE-2024-48248
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
NAKIVO Backup & Replication software contains a path traversal vulnerability that may allow unauthorized reading of files. This could expose sensitive information and credentials, posing a risk to enterprise systems and data integrity. Organizations using the affected product should address this issue to protect their