The host is installed with VMware Fusion 13.x before 13.0.2 and is prone to a stack-based buffer-overflow vulnerability. A flaw is present in the application, which fails to properly handle the functionality for sharing host Bluetooth devices with the virtual machine. Successful exploitation allows an attacker with local administrative privileges on a virtual machine to exploit this issue to execute code as the virtual machine's VMX process running on the host.