The first two vulnerabilities have been reported to VMware via Trend Micro's Zero Day Initiative (the organizers of the Pwn2Own contest). The other two were reported directly to VMware by the researchers who discovered them.