Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Broadcom released emergency security updates for VMware ESX, vCenter, Workstation, Fusion, and Cloud Foundation to address multiple vulnerabilities — including two critical CVSS 9.8 flaws (an authentication bypass and a directory-traversal RCE) and a VMXNET3 virtual machine escape — affecting a wide range of VMware versions. No evidence of active exploitation has been reported, but there are no workarounds and immediate patching is recommended.