important · Virtualization
A VMware guest administrator can execute code in the host virtualization process.
Affects
VMware Workstation on Windows or Linux hosts and VMware Fusion on macOS, which run desktop virtual machines.
Crafted guest input reaches an integer overflow in VMXNET3 or a stack buffer overflow in HGFS, crossing Workstation or Fusion's guest boundary into host-side code execution.
Detail and 3 sources
Broadcom shipped fixes, and no researcher demonstration or public exploit was available by the cutoff.