CVE-2021-31693

Name of the Vulnerable Software and Affected Versions VMware Tools for Windows versions prior to 12.1.5

Description The issue is related to a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest OS can trigger a PANIC in the VM3DMP driver, leading to a denial-of-service condition in the Windows guest OS.

Recommendations For versions prior to 12.1.5, update to version 12.1.5 or later to resolve the issue. As a temporary workaround, consider disabling the VM3DMP driver until a patch is available. Restrict access to the Windows guest OS to minimize the risk of exploitation.