Multiple security vulnerabilities affecting VMware Workstation versions The flaws affect VMware Workstation 25H2 and 26H1 on any host have been identified in VMware Workstation and Fusion...
CVE-2026-59346: An integer-overflow bug in the VMXNET3 virtual network adapter allows a local admin on such a VM “may exploit this issue to execute code on the host”.[/subscribe_to_unlock_form]
Multiple security vulnerabilities affecting VMware Workstation versions The flaws affect VMware Workstation 25H2 and 26H1 on any host have been identified in VMware Workstation and Fusion...
CVE-2026-59346: An integer-overflow bug in the VMXNET3 virtual network adapter allows a local admin on such a VM “may exploit this issue to execute code on the host”.[emaillocker id="1283"]
CVE-2026-59347: A stack buffer overflow in HGFS could run code “as the virtual machine’s VMX process running on the host”.
These vulnerabilities collectively present a significant risk for users of VMware Workstation and Fusion, particularly those who rely on these products to isolate untrusted code.
We recommend you to update VMware Workstation and Fusion to version 26H1u1.
The following reports contain further technical details:
[/emaillocker]