{"id":"CVE-2026-59346","published":"2026-10-07T06:16:35.543","lastModified":"2026-10-07T15:58:17.433","description":"VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host.\n\nAffected versions:\n- VMware Workstation: 25H2, 26H1 (fixed in 26H1u1)\n- VMware Fusion: 25H2, 26H1 (fixed in 26H1u1)","cvssScore":9.3,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/security-advisories/0/38288","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw is an integer-overflow vulnerability in VMware Workstation and Fusion, allowing a local attacker with administrative privileges to execute code on the host. This matters because it provides a powerful attack vector for privilege escalation and remote code execution.","exploitability":"Exploitation is relatively straightforward for an attacker with local admin rights on a virtual machine with the VMXNET3 adapter. Precondition is the presence of the VMXNET3 adapter and local admin privileges.","blast_radius":"If exploited, the attacker can execute code on the host, potentially leading to full system compromise and data loss.","remediation":"Upgrade to VMware Workstation 26H1u1 or later, or VMware Fusion 26H1u1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","local-privilege-escalation","vmware","critical"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:44:05.857Z"}}