Break out your emergency change process and patch this ransomware-friendly bug ASAP, says VMware