VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. Broadcom has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.1.
https://www.securityweek.com/vmware-workstation-and-fusion-updates-patch-critical-vulnerability/