PT-2026-85031 · Vmware · Vmware Fusion+1
CVE-2026-59346
·
Published
2026-09-03
·
Updated
2026-09-11
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
VMware Workstation versions 25H2 through 26H1
VMware Fusion versions 25H2 through 26H1
Description
An integer overflow exists in the VMXNET3 virtual network adapter within the hypervisor. A malicious actor with local administrative privileges inside a guest virtual machine can exploit this flaw to achieve guest-to-host code execution, allowing them to break out of the virtualized environment and execute arbitrary code on the host operating system.
Recommendations
Update VMware Workstation to version 26H1u1 or later.
Update VMware Fusion to version 26H1u1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Vmware Fusion
Vmware Workstation