Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
Broadcom patched two VMware Workstation and Fusion flaws that let local VM administrators execute code on the host; no exploitation is known.
More info