AI description
CVE-2026-59346 is an integer-overflow vulnerability affecting the VMXNET3 virtual network adapter in VMware Workstation and VMware Fusion versions 25H2 and 26H1. The issue resides in the TCP Segmentation Offload (TSO) processing path within the host's VMware-VMX process, which handles splitting large network packets into smaller segments. When calculating the memory required for these segments, the system performs a 32-bit multiplication of the segment count by the space needed per segment. If the result exceeds the 32-bit limit, it wraps to a smaller value, leading to an undersized buffer allocation. Because the subsequent copy loop still processes the original segment count, guest-controlled packet data is written beyond the allocated buffer, resulting in an out-of-bounds write. An attacker with local administrative privileges inside a guest virtual machine can exploit this vulnerability to escape the virtual machine sandbox and execute arbitrary code on the host system, or cause the host process to crash. Broadcom addressed this issue by releasing patches in VMware Workstation and Fusion version 26H1u1 on September 3, 2026.
- Description
- VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Affected versions: - VMware Workstation: 25H2, 26H1 (fixed in 26H1u1) - VMware Fusion: 25H2, 26H1 (fixed in 26H1u1)
- Source
- security@vmware.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 9.3
- Impact score
- 6
- Exploitability score
- 2.5
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
- security@vmware.com
- CWE-190
- Hype score
- Not currently trending
VMware VMXNET3 の脆弱性 CVE-2026-59346：ゲストからホストへのコード実行と PoC の公開 https://t.co/t2AoRGdbb4 VMware 製仮想化ソフトウェアにおける深刻な欠陥 CVE-2026-59346 について解説する記事です。仮想ネットワーク機
@iototsecnews
21 Oct 2026
119 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
以下は参考資料 CVE-2026-59346 is a critical integer-overflow vulnerability in VMware Workstation and Fusion that can allow a privileged guest to compromise the host. Summary: A local administrator inside a VM that uses the VMXNET3 virtual NIC can trigger an integer overfl
@hogepee
8 Oct 2026
42 Impressions
0 Retweets
3 Likes
0 Bookmarks
0 Replies
0 Quotes
以下は参考資料 CVE-2026-59346 is a critical integer-overflow vulnerability in VMware Workstation and Fusion that can allow a privileged guest to compromise the host. Summary: A local administrator inside a VM that uses the VMXNET3 virtual NIC can trigger an integer overfl
@hogepee
8 Oct 2026
13 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🔐 VMware VMXNET3 VM Escape — CVE-2026-59346 CVSS 9.3, Public PoC Released for Guest-to-Host Code Execution VMWARE — CVE-2026-59346, CVSS 9.3 VMXNET3 integer overflow → VM escape. 🔗 https://t.co/qWRMu6DIrn #CyberSecurity #ThreatIntel #VMware #CVE #VMEscape #PatchNo
@ThreatAft
8 Oct 2026
130 Impressions
1 Retweet
1 Like
0 Bookmarks
0 Replies
0 Quotes
VMwareの仮想ネットワークアダプターVMXNET3に、ゲストOSからホスト側でコードを実行できる整数オーバーフローの脆弱性が見つかった。CVE-2026-59346として追跡され、VMware WorkstationとFusionに影響する。技術解析と
@yousukezan
8 Oct 2026
7882 Impressions
37 Retweets
87 Likes
30 Bookmarks
0 Replies
2 Quotes
CVE advisory (CRITICAL): CVE-2026-59346 - vmware: VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability. https://t.co/5fc8W4ln5W #CVE #CyberSecurity #VMware #VMwareWorkstation
@vulnipulse
7 Oct 2026
60 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-59346 & CVE-2026-59347: Inside the Critical VMware Workstation and Fusion Flaws Link: https://t.co/DCHNtuQ5DX #vmware #vmwareworkstation #vmwarefusion #cve202659346 #cve202659347 https://t.co/n91jlQAYZC
@_havij
11 Sept 2026
22 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) URL: https://t.co/BBVRM6g1Je Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 9.3
@samilaiho
9 Sept 2026
706 Impressions
1 Retweet
1 Like
0 Bookmarks
0 Replies
0 Quotes
#Broadcom has fixed #Critical security vulnerabilities in #VMware Workstation and Fusion. #CVE-2026-59346 #CVE-2026-59347 https://t.co/OY9uOeyBn8
@NCIIPC
8 Sept 2026
232 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMware Workstation/Fusion critical CVE-2026-59346 (9.3): VM admin with VMXNET3 can run host code. Broadcom VMSA-2026-0007. https://t.co/XU8RZUcyuF
@snakeyesV1
7 Sept 2026
87 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
VMware Workstation/Fusionに、仮想マシンの管理者がホスト上でコードを実行可能な脆弱性。CVE-2026-59346はCVSSスコア9.3の整数オーバーフロー。VMXNET3仮想ネットワークアダプタが仮想マシンにあることが条件。その他
@__kokumoto
6 Sept 2026
1134 Impressions
3 Retweets
8 Likes
1 Bookmark
0 Replies
0 Quotes
🚨 CVE-2026-59346 (CVSS 9.3): Critical VMware Workstation/Fusion VM escape via VMXNET3 integer overflow. ✅ Upgrade to 26H1u1 NOW 🔒 No workarounds available Full analysis: [Link] 🔗 https://t.co/VcUWR61Umy #VMware #CVE202659346 #infosec #cybersecurity #VMescape https://t
@ThreatAft
6 Sept 2026
50 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-59346: Critical VMware Vulnerability Puts Millions of Virtual Environments at Risk #cybersecurity #cyashadotcom #NiWinPauly https://t.co/fudSnnhiod
@cyashadotcom
6 Sept 2026
66 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Broadcom patched CVE-2026-59346, a critical VMware flaw allowing local VM admins to execute code on host systems. SOC analysts: update VMware Workstation and Fusion immediately to prevent host takeover. #VMware #CVE2026 #patchnow #SOCAnalyst #infosec https://t.co/lfb5Qmiui1
@SOCMinute
6 Sept 2026
6 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
VMware Workstation and Fusion Updates Patch Critical Vulnerability Broadcom patched VMware Workstation and Fusion vulnerabilities CVE-2026-59346 and CVE-2026-59347, which could allow code execution on the host. If your team uses VMware Workstation or Fusion, prioritize these
@VistemSolutions
5 Sept 2026
41 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Broadcom patched two VMware Workstation and Fusion vulnerabilities: CVE-2026-59346 (CVSS 9.3), an integer overflow in the VMXNET3 network adapter, and CVE-2026-59347 (CVSS 8.1), a buffer overflow in HGFS. Both let a local VM admin execute code on the host. No workaround exists;
@XavierRiveraX
5 Sept 2026
72 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMware Workstation ve Fusion'da Kritik RCE CVE-2026-59346 (CVSS 9.3), yerel yönetici yetkisine sahip saldırganların VMXNET3 üzerinden host sistemde keyfi kod çalıştırmasına izin veriyor. Ayrıca CVE-2026-59347 (CVSS 8.1) de giderildi. https://t.co/wQSNBtHbUu
@KubbeSiber
5 Sept 2026
49 Impressions
1 Retweet
1 Like
1 Bookmark
0 Replies
0 Quotes
Broadcom schließt kritische Lücke in VMware Workstation und Fusion (CVE-2026-59346): https://t.co/GGtFlbKCwu - #hacker #news #technology #technologie #it #informationstechnologie #hacking #computer #nerds #itsicherheit #itsecurity #itnews #cybercrime #cybersecurity #hacks
@mitchcasspari
5 Sept 2026
27 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Major alert for VMware users: Workstation and Fusion versions 25H2 and 26H1 have two critical vulnerabilities (CVE-2026-59346 & CVE-2026-59347) that allow guest VMs with local admin access to execute code on the host. CVSS scores of 9.3 and 8.1. Broadcom has released fix http
@dailytechonx
5 Sept 2026
66 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Broadcom patched CVE-2026-59346 (CVSS 9.3) in VMware Workstation and Fusion: an integer overflow in VMXNET3 allows VM escape and code execution on the host. Update now. #VMware #InfoSec #Cybersecurity https://t.co/YC0RAAKUji
@CyberWorldOps
5 Sept 2026
4 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMware Critical Security Advisory VMSA-2026-0007 - VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) Please see the latest advisory: VMSA-2026-0007
@FactoryInternet
4 Sept 2026
28 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Warning: Severe vulnerabilities in #VMware #Workstation and #Fusion. Successful exploitation of #CVE-2026-59346 or #CVE-2026-59347 could enable a threat actor with local administrative privileges to execute code on the host. Read https://t.co/vKFDOVwlBg and #Patch #Patch #Patch
@CCBalert
4 Sept 2026
213 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Broadcom disclosed two vulnerabilities in VMware Workstation and Fusion. CVE-2026-59346 (CVSS 9.3, Critical) is an integer overflow in VMXNET3 allowing host code execution from a local-admin guest. CVE-2026-59347 (CVSS 8.1) is a stack buffer overflow in HGFS enabling code
@WorldCyberNewsX
4 Sept 2026
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMware WorkstationとFusionのVMnet3の脆弱性がやばそうなので、AIにまとめてもらった。 ーーー VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) → https://t
@ripjyr
3 Sept 2026
835 Impressions
1 Retweet
5 Likes
3 Bookmarks
0 Replies
0 Quotes
🚨 Dos fallas en #VMware pueden convertir una VM comprometida en una puerta hacia el host. CVE-2026-59346 y CVE-2026-59347 permiten escenarios de #VMEscape y ejecución de código. 🔗 https://t.co/HDFGpmzaVP 🧵 Hilo #CyberSecurity 👇
@totalcybersec
3 Sept 2026
198 Impressions
3 Retweets
2 Likes
1 Bookmark
1 Reply
0 Quotes
VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) https://t.co/bcsmTZIblU
@autumn_good_35
3 Sept 2026
502 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
VMware Workstation and Fusion users face critical security risks: two vulnerabilities—CVE-2026-59346 in VMXNET3 and CVE-2026-59347 in HGFS—can let attackers with guest admin access escape VMs and execute code on the host. Broadcom’s patch 26H1-u1 is the only fix; no workaro
@dailytechonx
3 Sept 2026
55 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 VMware Workstation/Fusion VM Escape: CVE-2026-59346 (CVSS 9.3) Critical Vulnerability Alert! VMware Workstation 25H2/26H1 and Fusion 25H2/26H1 is affected by CVE-2026-59346. 🔍 Identify Targets via ZoomEye: Search Dork: app="VMware" Exposure: 1.4m instances identified h
@zoomeyebot
3 Sept 2026
16 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes