CVE-2017-4903

CVE-2017-4903 describes an uninitialized stack memory usage vulnerability within the SVGA component of VMware ESXi (multiple versions), Workstation Pro/Player 12.x, and Fusion Pro/Fusion 8.x. This flaw could allow a malicious guest operating system to execute arbitrary code on the underlying host system. With a CVSS score of 8.8 (HIGH), it represents a significant risk, as a low-privileged attacker on the guest OS could achieve complete compromise of the host with low attack complexity. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability garnered notable community discussion and media coverage at the time of its disclosure, indicating awareness among security researchers.