A previous fix for the critical remote code execution bug was “incomplete,” according to VMware.
Source: Threadpost