VMware hypervisor escape via serial port? VMware hypervisor escape via serial port.

VMware has advised of two security flaws that impact its desktop products. VMware's desktop hypervisors Workstation and Fusion, plus the Player app that runs pre-packaged virtual machines, all have “an input validation issue on an RPC command” that could allow a denial-of-service of the guest operating System (32-bit) or a …

[ZSn]

Mitigation

Identified mitigations

“Disconnect” the Virtual Printer, or remove it entirely in the VM settings, this will stop vprintproxy.exe from running.

It would have been useful to add this bit...