CVE-2023-20867

Summary: CVE-2023-20867 affects open-vm-tools (VMware Tools) with an authentication bypass in the vgauth module, enabling a fully compromised ESXi host to disrupt host-to-guest authentication and impact guest VM confidentiality and integrity. The issue is exploitable with root access on ESXi (loc...

CVE-2020-3972

CVE-2020-3972 affects VMware Tools for macOS (11.x.x and prior) with a denial-of-service in the Host-Guest File System (HGFS). The issue can be exploited by non-admin users inside a guest macOS VM to cause a DoS on their own VM when HGFS sharing is enabled. VMware provides a fix in VMware Tools f...