A few days ago, 2017-03-28, VMware released a few security patches that will prevent a guest from execute code on the ESXi host. This has been possible based on heap buffer overflow and uninitialized stack memory usage in SVGA. Available VMware KB articles for these issues are: KB 2149672 KB 2149673 Affected VMware ESXi versions …