Digital.Nhs.Uk Critical Vulnerabilities in VMware Workstation and Fusion Patched
Article Content
- •Two critical vulnerabilities in VMware Workstation and Fusion patched.
- •CVE-2026-59346 (integer overflow) has a CVSS score of 9.3.
- •Immediate upgrade to version 26H1u1 is recommended to mitigate risks.
Broadcom has released patches for two critical vulnerabilities in VMware Workstation and Fusion, tracked as CVE-2026-59346 and CVE-2026-59347. The first vulnerability, an integer overflow (CVSS 9.3), allows local administrative users on a VM to execute arbitrary code on the host. The second, a stack-based buffer overflow (CVSS 8.1), also permits code execution under similar conditions. Both vulnerabilities affect versions 25H2 and 26H1, and users are urged to upgrade to version 26H1u1 immediately. No exploitation in the wild has been reported, but the potential for abuse exists given the nature of the flaws. The vulnerabilities were privately reported to Broadcom, and there are no known workarounds available.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (11)
Following this threat?
Track Broadcom and CVE-2026-59346 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Public PoC Exploit for VMware VMXNET3 Vulnerability Released A public proof-of-concept (PoC) exploit has been released for CVE-2026-59346, a critical integer overflow vulnerability in VMware's VMXNET3 virtual network adapter. This flaw allows an attacker with administrative access in a guest virtual machine to execute code on the host system. The vulnerability has a CVSS score… 
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…