Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

As cited

Copy frozen at 2026-09-05 19:48 UTC (site build).

vulnerabilities

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Broadcom released security updates for VMware Workstation and Fusion addressing two vulnerabilities, including CVE-2026-59346, a critical integer-overflow flaw with a CVSS score of 9.3. A local attacker with elevated privileges can exploit this vulnerability to achieve arbitrary code execution on the host system.

Why it matters: Administrators running VMware Workstation or Fusion environments need to apply these patches immediately, as the critical vulnerability allows privileged local attackers to escape the virtual machine and compromise the underlying host.

Source published

2026-09-05 16:05 UTC

First seen by Cybersecurity Tracker

2026-09-05 19:29 UTC