VMware Workstation and Fusion Updates Patch Critical Vulnerability
Vulnerabilities
The flaws could allow attackers with administrative access to a virtual machine to execute code on the host system.
Broadcom on Thursday announced patches for two critical and high-severity vulnerabilities in VMware Workstation and Fusion.
The first issue, tracked as CVE-2026-59346 (CVSS score of 9.3), is described as an integer overflow bug leading to arbitrary code execution.
“A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host,” Broadcom notes in its advisory.
Tracked as CVE-2026-59347 (CVSS score of 8.1), the second flaw is a stack-based buffer overflow that could lead to similar outcomes, albeit the exploitation conditions are different.
“A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine’s VMX process running on the host,” Broadcom explains.
Both vulnerabilities affect...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
