BROADCOM WARNS OF AUTHENTICATION BYPASS IN VMWARE WINDOWS TOOLS

Summary from the TLDR InfoSec newsletter

VMware Tools is a suite of drivers and utilities that enhance graphics, performance, and system integration for VMware guest operating systems. Positive Technologies, a Russian cybersecurity firm, reported a privilege escalation vulnerability in VMware Tools for Windows. This vulnerability enables a malicious actor with non-admin privileges to perform high-privilege operations within the VM. The exploit could potentially combine with recently disclosed VM escape vulnerabilities.