VMWARE SANDBOX ESCAPE BUGS ARE SO CRITICAL, PATCHES HAVE BEEN RELEASED FOR END-OF-LIFE PRODUCTS

Summary from the TLDR InfoSec newsletter

VMware is urging customers to patch critical vulnerabilities that allow hackers to escape VMware's sandbox and hypervisor protections across all versions of ESXi, Workstation, Fusion, and Cloud Foundation products. The four flaws, with two rated at a 9.3/10 severity, undermine the products' core purpose of running sensitive operations inside a virtual machine segmented from the host machine.