Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Broadcom has issued security updates to address two vulnerabilities in VMware Workstation and Fusion. One of these vulnerabilities is critical and can be exploited by a local attacker with elevated privileges to execute arbitrary code on the host. This flaw is due to an integer-overflow vulnerability. The vulnerability has a CVSS score of 9.3, indicating a high level of severity. A local attacker can exploit this vulnerability under certain conditions.