PT-2026-85032
CVE-2026-59347
·
Published
2026-09-03
·
Updated
2026-10-08
Description by
CVSS 3.1
8.1
HighMetricsAV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
VMware Workstation versions 25H2 through 26H1
VMware Fusion versions 25H2 through 26H1
Description
A stack-based buffer-overflow exists in HGFS. A malicious actor with local administrative privileges on a virtual machine can exploit this to execute code as the virtual machine's VMX process on the host.
Recommendations
Update VMware Workstation to version 26H1u1.
Update VMware Fusion to version 26H1u1.
Found an issue in the description? Have something to add? Feel free to write us 👾