Back Securityaffairs.Co

Broadcom releases VMware Fusion security update for root access bug

Securityaffairs.Co •Pierluigi Paganini • May 14, 2026

Broadcom patched a high-severity VMware Fusion flaw, CVE-2026-41702, that could let local attackers gain root privileges. Broadcom released a security update for VMware Fusion to address a high-severity vulnerability, tracked as CVE-2026-41702, that could allow local attackers to escalate privileges to root on affected systems. The flaw is a time-of-check time-of-use (TOCTOU) vulnerability affecting operations […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical VMware Fusion Vulnerability Allows Local Privilege Escalation Broadcom has released a critical security update for VMware Fusion to address CVE-2026-41702, a high-severity vulnerability that allows local attackers to escalate privileges to root on affected macOS systems. This TOCTOU (Time-of-Check Time-of-Use) flaw can be exploited by users with non-administrative privileges, enabling them to gain complete control over the system. The vulnerability was privately reported to Broadcom and patched on May 14, 2026. VMware Fusion is widely used by developers and IT professionals, making this flaw particularly concerning for organizations relying on this software. While the vulnerability requires local access, it significantly increases risks from compromised user accounts and insider threats. The CVSS score for this vulnerability is 7.8, indicating its potential impact in real-world environments. 5 sources 72

Extracted Entities

Broadcom releases VMware Fusion security update for root access bug

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (2)

Platforms (1)