{"id":"CVE-2026-59347","published":"2026-10-07T06:16:35.700","lastModified":"2026-10-07T15:58:17.433","description":"VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.\n\nAffected versions:\n- VMware Workstation: 25H2, 26H1 (fixed in 26H1u1)\n- VMware Fusion: 25H2, 26H1 (fixed in 26H1u1)","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/security-advisories/0/38288","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in VMware Workstation and Fusion's HGFS component allows a local administrator within a VM to execute arbitrary code as the VMX host process, potentially leading to full host compromise.","exploitability":"Exploitation requires local administrative access within a guest VM, making it moderately difficult but possible for attackers who have already gained VM access, with no additional user interaction required once the precondition is met.","blast_radius":"If exploited, this vulnerability could allow attackers to escape the VM boundary and gain full control of the host system, potentially affecting all VMs running on that host.","remediation":"Upgrade to VMware Workstation 26H1u1 or VMware Fusion 26H1u1 immediately.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","vmware","privilege-escalation","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:57:14.671Z"}}