The issue is a race condition flaw that could be exploited by an attacker to access the guest virtual machine to escalate privileges. The vulnerability has been assigned an important severity rating and a CVSS score of 7.8.8. The issue affects Tools for Windows version 10.x.y as the affected functionality is not present in the 11.0.y version. The company also disclosed an information disclosure issue, tracked as CVE-2020-3940, that affects Workspace ONE SDK and dependent iOS and Android applications.”]
Source: https://securityaffairs.co/wordpress/96446/security/vmware-tools-and-workspace-one-sdk-flaws.html