VMware Vulnerabilities Expose Customers to Major Hyperjacking Threats

Three significant vulnerabilities in VMware's virtual machine products expose customer networks to serious risks, enabling potential hyperjacking attacks that can compromise the hypervisor and allow unauthorized access to multiple virtual machines. This breach dismantles the isolation typically provided by virtual machines, raising concerns about the security of various organizations' internal networks. Security researcher Kevin Beaumont underscored the critical nature of the vulnerabilities, which have been reported to be actively exploited in the wild. Affected products include all versions of VMware's ESXi, Workstation, Fusion, Cloud Foundation, and Telco Cloud Platform, underscoring the extensive impact across different deployments.

Opens on Ars Technica