Need to find the article, but there is issues with VMWare Server leaking packets across the physical interface. I forget of the leak only occured between VMs, or the VMs and the host, or both.

CISA and the NSA warn that Chinese state-sponsored attackers are deploying malware dubbed BRICKSTORM on VMware servers to perform lateral movement inside victim networks. Chinese state-sponsored ...