Please consider marking this answer "correct" or "helpful" if you think your question have been answered correctly.
You can download VMware Tools Offline VIB Bundle in Update Manager in the manual mode Download VMware vSphere
You can also resolve the vulnerability by using the isolation.tools.hgfs.disable parameter.
So my update manager will not assist me in updating all the tools across all my servers? I have to download and run individually on each guest OS?
or is what i'm looking for happen after i get hosts updated with latest?
EDIT: This was what i was looking for but wasn't sure how to ask it. I can manually download and install vmtools updates, but it will be bundled into esxi host updates that i can apply via update manager i just have to wait for release.