9.3
Critique
CVE-2026-59346 VMware Workstation and Fusion contain an integer-overflow vulnerability
Description
VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Affected versions: - VMware Workstation: 25H2, 26H1 (fixed in 26H1u1) - VMware Fusion: 25H2, 26H1 (fixed in 26H1u1)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| VMware Workstation 26 | premières → < 26H1u1 | 26H1u1 |
| VMware Workstation 25 | 25H2 → 26H1 | Pas de correctif indiqué |
| VMware Fusion 26 | premières → < 26H1u1 | 26H1u1 |
| VMware Fusion 25 | 25H2 → 26H1 | Pas de correctif indiqué |
Références
- support.broadcom.com support.broadcom.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de VMware Workstation
Les 7 CVE de VMware Workstation →
CVE-2026-59347
VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS
8.1
Élevée
CVE-2020-3959
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before…
Non notée
CVE-2020-3958
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before…
Non notée
CVE-2019-5539
VMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4)…
Non notée