Back X Cyber Security News on X: "‼️ PoC Released for Critical VMware VMXNET3 Flaw Enabling ...
‼️ PoC Released for Critical VMware VMXNET3 Flaw Enabling Guest-to-Host Code Execution
A public proof of concept is now available for CVE-2026-59346, a critical integer overflow flaw in VMware’s VMXNET3 virtual network adapter.
The flaw can allow an attacker with administrative access inside a guest virtual machine to execute code on the host. However, the published PoC shows a host process crash, not a working code-execution exploit. Its advisory lists Workstation and Fusion versions 25H2 and 26H1 as affected.
The vendor security advisory states that no workaround is available. The flaw sits in the TCP Segmentation Offload, or TSO, processing path within the host’s VMware-VMX process. TSO splits a large network packet into smaller segments.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
