- Description
- VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware Workstation: 25H2, 26H1 (fixed in 26H1u1) - VMware Fusion: 25H2, 26H1 (fixed in 26H1u1)
- Source
- security@vmware.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 8.1
- Impact score
- 6
- Exploitability score
- 1.4
- Vector string
- CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
- Severity
- HIGH
- security@vmware.com
- CWE-121
- Hype score
- Not currently trending
CVE advisory (HIGH): CVE-2026-59347 - vmware: VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability. https://t.co/850BQQfHP2 #CVE #CyberSecurity #VMware #VMwareWorkstation
@vulnipulse
7 Oct 2026
49 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-59346 & CVE-2026-59347: Inside the Critical VMware Workstation and Fusion Flaws Link: https://t.co/DCHNtuQ5DX #vmware #vmwareworkstation #vmwarefusion #cve202659346 #cve202659347 https://t.co/n91jlQAYZC
@_havij
11 Sept 2026
22 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) URL: https://t.co/BBVRM6g1Je Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 9.3
@samilaiho
9 Sept 2026
706 Impressions
1 Retweet
1 Like
0 Bookmarks
0 Replies
0 Quotes
#Broadcom has fixed #Critical security vulnerabilities in #VMware Workstation and Fusion. #CVE-2026-59346 #CVE-2026-59347 https://t.co/OY9uOeyBn8
@NCIIPC
8 Sept 2026
232 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMware Workstation and Fusion Updates Patch Critical Vulnerability Broadcom patched VMware Workstation and Fusion vulnerabilities CVE-2026-59346 and CVE-2026-59347, which could allow code execution on the host. If your team uses VMware Workstation or Fusion, prioritize these
@VistemSolutions
5 Sept 2026
41 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Broadcom patched two VMware Workstation and Fusion vulnerabilities: CVE-2026-59346 (CVSS 9.3), an integer overflow in the VMXNET3 network adapter, and CVE-2026-59347 (CVSS 8.1), a buffer overflow in HGFS. Both let a local VM admin execute code on the host. No workaround exists;
@XavierRiveraX
5 Sept 2026
72 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMware Workstation ve Fusion'da Kritik RCE CVE-2026-59346 (CVSS 9.3), yerel yönetici yetkisine sahip saldırganların VMXNET3 üzerinden host sistemde keyfi kod çalıştırmasına izin veriyor. Ayrıca CVE-2026-59347 (CVSS 8.1) de giderildi. https://t.co/wQSNBtHbUu
@KubbeSiber
5 Sept 2026
49 Impressions
1 Retweet
1 Like
1 Bookmark
0 Replies
0 Quotes
Major alert for VMware users: Workstation and Fusion versions 25H2 and 26H1 have two critical vulnerabilities (CVE-2026-59346 & CVE-2026-59347) that allow guest VMs with local admin access to execute code on the host. CVSS scores of 9.3 and 8.1. Broadcom has released fix http
@dailytechonx
5 Sept 2026
66 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMware Critical Security Advisory VMSA-2026-0007 - VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) Please see the latest advisory: VMSA-2026-0007
@FactoryInternet
4 Sept 2026
28 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Warning: Severe vulnerabilities in #VMware #Workstation and #Fusion. Successful exploitation of #CVE-2026-59346 or #CVE-2026-59347 could enable a threat actor with local administrative privileges to execute code on the host. Read https://t.co/vKFDOVwlBg and #Patch #Patch #Patch
@CCBalert
4 Sept 2026
213 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Broadcom disclosed two vulnerabilities in VMware Workstation and Fusion. CVE-2026-59346 (CVSS 9.3, Critical) is an integer overflow in VMXNET3 allowing host code execution from a local-admin guest. CVE-2026-59347 (CVSS 8.1) is a stack buffer overflow in HGFS enabling code
@WorldCyberNewsX
4 Sept 2026
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMware WorkstationとFusionのVMnet3の脆弱性がやばそうなので、AIにまとめてもらった。 ーーー VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) → https://t
@ripjyr
3 Sept 2026
835 Impressions
1 Retweet
5 Likes
3 Bookmarks
0 Replies
0 Quotes
🚨 Dos fallas en #VMware pueden convertir una VM comprometida en una puerta hacia el host. CVE-2026-59346 y CVE-2026-59347 permiten escenarios de #VMEscape y ejecución de código. 🔗 https://t.co/HDFGpmzaVP 🧵 Hilo #CyberSecurity 👇
@totalcybersec
3 Sept 2026
198 Impressions
3 Retweets
2 Likes
1 Bookmark
1 Reply
0 Quotes
VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) https://t.co/bcsmTZIblU
@autumn_good_35
3 Sept 2026
502 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
VMware Workstation and Fusion users face critical security risks: two vulnerabilities—CVE-2026-59346 in VMXNET3 and CVE-2026-59347 in HGFS—can let attackers with guest admin access escape VMs and execute code on the host. Broadcom’s patch 26H1-u1 is the only fix; no workaro
@dailytechonx
3 Sept 2026
55 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes