Critical severity · published Oct 7, 2026
CVE-2026-59346
VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability
9.3
CVSS
0.4%
EPSS
No
On KEV
Description
VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host.
Affected versions:
- VMware Workstation: 25H2, 26H1 (fixed in 26H1u1)
- VMware Fusion: 25H2, 26H1 (fixed in 26H1u1)
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VF
VMware Fusion · VMware
25H2 through 26H1 · source: vendor
VW
VMware Workstation · VMware
25H2 through 26H1 · source: vendor
In the news
VulnerabilityHigh
ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-59346.
Sep 9, 2026·Zero Day Initiative
VulnerabilityCritical
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions.
The vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code.
"A
Sep 5, 2026·The Hacker News
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-59346
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-59346
support.broadcom.com
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/security-advisories/0/38288
More from VMware Fusion
8.1
CVE-2026-59347
VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability