VMware Fusion Flaw Could Allow Attackers to Gain Root Privileges

Gbhackers •Divya • May 15, 2026

A newly disclosed vulnerability in VMware Fusion has raised serious security concerns after researchers confirmed it could allow attackers to escalate privileges to root on affected systems. The flaw, tracked as CVE-2026-41702, has been rated high severity with a CVSS score of 7.8, highlighting its potential impact in real-world environments. VMware Fusion Flaw Broadcom, which […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical VMware Fusion Vulnerability Allows Local Privilege Escalation Broadcom has released a critical security update for VMware Fusion to address CVE-2026-41702, a high-severity vulnerability that allows local attackers to escalate privileges to root on affected macOS systems. This TOCTOU (Time-of-Check Time-of-Use) flaw can be exploited by users with non-administrative privileges, enabling them to gain complete control over the system. The vulnerability was privately reported to Broadcom and patched on May 14, 2026. VMware Fusion is widely used by developers and IT professionals, making this flaw particularly concerning for organizations relying on this software. While the vulnerability requires local access, it significantly increases risks from compromised user accounts and insider threats. The CVSS score for this vulnerability is 7.8, indicating its potential impact in real-world environments. 5 sources 72

Extracted Entities

VMware Fusion Flaw Could Allow Attackers to Gain Root Privileges

The full story

Extracted Entities

Companies (1)

CVEs (1)

MITRE ATT&CK (1)

Tools (1)