[Cody Johnston]

Hi All!

I haven't tested this myself yet, but it seems that someone has found a bug that allows escaping VBOX from guest to host.

Here is a link to the full writeup, there is code in there but it's not ready-made for people to just go and use, as the code is within the writeup:

https://github.com/MorteNoir1/virtualbox_e1000_0day

And the video showing the escape working:

https://vimeo.com/299325088

[h00key]

Looks like VMWare products were compromised too:

https://www.vmware.com/security/advisor ... -0027.html

https://www.securityweek.com/vmware-pat ... ng-contest