Information
Due to performance reasons, modern graphic rendering is done within a dedicated graphic processing unit (GPU). Virtual machines can use the host-based GPU for such operations as well. Such dedicated hardware is typically accessed by using complex APIs like OpenGL and DirectX. This hardware-based 3D acceleration should be disabled if it is not needed.
Rationale:
Security flaws within APIs can lead to serious security breaches like memory corruption, denial of service, and remote code execution.
Solution
To disable hardware-based 3D acceleration, run the following PowerCLI command:
# Add the setting to all VMs
Get-VM | New-AdvancedSetting -Name 'mks.enable3d' -value $false
References:
https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-15D965F3-05E3-4E59-9F08-B305FDE672DD.html