VMware patches flaws that expose users to data leakage, command execution and denial-of-service attacks. No temporary workarounds available.