SecurityThe Hacker Newsabout 2 hours ago
Critical VMware Flaw Lets VM Admins Execute Host Code
1 min read
Broadcom patched two VMware Workstation and Fusion flaws, including critical CVE-2026-59346 (CVSS 9.3), an integer-overflow bug allowing local admins with VMXNET3 adapters to execute host code. Also fixed is CVE-2026-59347 (CVSS 8.1), a stack-based buffer overflow in HGFS. Both affect versions 25H2 and 26H1, patched in 26H1u1.
Level
Hype check
Tap to vote and see what everyone thinks.
