CVE-2022-31693: 
VMware Tools vulnerability analysis and mitigation

VMware Tools for Windows (versions 12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability (CVE-2022-31693) in the VM3DMP driver. The vulnerability was privately reported to VMware and was disclosed through security advisory VMSA-2022-0029 (VMware Advisory).

The vulnerability exists in the VM3DMP driver component of VMware Tools for Windows. VMware has evaluated the severity of this issue with a CVSSv3 base score of 3.3 (Low Severity Range). The CVSS vector is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating local access requirements and potential high impact on availability (VMware Advisory).

When successfully exploited, this vulnerability can lead to a denial-of-service condition in the Windows guest OS. The impact is limited to system availability, with no direct effect on confidentiality or integrity (NVD).

The vulnerability has been fixed in VMware Tools version 12.1.5. Users are advised to update to this version to remediate the vulnerability. No workarounds are available for this issue (VMware Advisory).

VMware acknowledged and thanked Sergey Kornienko and Wei Lei of PixiePoint Security for reporting this vulnerability (VMware Advisory).