Story thread · 2 reports / 2 sources

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

thehackernews.com · 9dShare

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions. The vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code. "A

First report: VMware Workstation and Fusion Updates Patch Critical Vulnerability — securityweek.com, 10d