CVE-2026-59346

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1

Description An integer overflow exists in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a guest virtual machine can exploit this issue to execute arbitrary code on the host operating system, potentially leading to a guest-to-host escape. The flaw is located in the TCP Segmentation Offload (TSO) processing path within the host's vmware-vmx process. TSO is a technique used to split large network packets into smaller segments to reduce CPU overhead.

Recommendations Update VMware Workstation to version 26H1u1. Update VMware Fusion to version 26H1u1.