Skip to content

Dark Corners: How a Failed Patch Left VMware ESXi VM Escapes Open for Two Years

Yuhao JiangXinlei YingZiming Zhang

VMware ESXi appears to be increasingly secure, as indicated by fewer CVEs and 0 success at Pwn2Own.

Summary

No summary yet — watch the video above, or open it on YouTube.

Related talks

Briefings·30 min

  • Black Hat
  • Red Team
  • Date: Aug 2025
  • Location: Las Vegas

Sandro Rüegge · Johannes Wikner

Exploit developers detail multi-threaded race conditions in Windows kernel drivers to achieve arbitrary memory read-write and privilege escalation.

hardwareexploitationkernel+1