importantSYS.SOURCE: The Hacker News• 2026-09-05T21:35:08+05:30

Critical Integer-Overflow Vulnerability in VMware Workstation and Fusion Enables Host Code Execution

#vmware #vulnerability #code execution #security update

A critical integer-overflow vulnerability (CVE-2026-59346, CVSS 9.3) and a stack-based buffer-overflow vulnerability (CVE-2026-59347, CVSS 8.1) in VMware Workstation and Fusion allow privileged attackers to execute host code. Both issues were patched in versions 26H1u1, affecting versions 25H2 and 26H1.

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions.

The vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code.

"A

Read original article

*** END OF TRANSMISSION ***

> OPTIMIZING LLM OUTPUT EFFICIENCY THROUGH HISTORICAL TELEGRAPHESE COMPRESSION TECHNIQUES > CISO INSIGHTS REVEAL CYBER RISK SHIFTS TOWARD INTERNAL WORKFLOWS > FBI WARNS OF ONGOING FORTIBLEED CAMPAIGN TARGETING FORTINET DEVICES WITH 86,644 CREDENTIALS COMPROMISED > CRITICAL ATLASSIAN DATA CENTER VULNERABILITY CVE-2026-21589 EXPLOITED WITHIN TWO HOURS OF DISCLOSURE > AGENTIC PENTESTING: PROOFS, LIMITATIONS, AND CONTINUOUS VALIDATION CHALLENGES > CHROME INTEGRATES JPEG XL FOR ENHANCED IMAGE COMPRESSION > EXPLOITING LARGE LANGUAGE MODELS AND DATA POISONING TO MANIPULATE CONSENSUS > ADVANCEMENTS IN SYNTHETIC BIOLOGY ENABLE CREATION OF MIRROR-LIFE ORGANISMS > CANADIAN STUDY WARNS PERMANENT DAYLIGHT SAVING TIME POSES RISKS TO SLEEP AND MENTAL HEALTH > RISING PS5 JAILBREAKS POSE SIGNIFICANT SECURITY CHALLENGES> OPTIMIZING LLM OUTPUT EFFICIENCY THROUGH HISTORICAL TELEGRAPHESE COMPRESSION TECHNIQUES > CISO INSIGHTS REVEAL CYBER RISK SHIFTS TOWARD INTERNAL WORKFLOWS > FBI WARNS OF ONGOING FORTIBLEED CAMPAIGN TARGETING FORTINET DEVICES WITH 86,644 CREDENTIALS COMPROMISED > CRITICAL ATLASSIAN DATA CENTER VULNERABILITY CVE-2026-21589 EXPLOITED WITHIN TWO HOURS OF DISCLOSURE > AGENTIC PENTESTING: PROOFS, LIMITATIONS, AND CONTINUOUS VALIDATION CHALLENGES > CHROME INTEGRATES JPEG XL FOR ENHANCED IMAGE COMPRESSION > EXPLOITING LARGE LANGUAGE MODELS AND DATA POISONING TO MANIPULATE CONSENSUS > ADVANCEMENTS IN SYNTHETIC BIOLOGY ENABLE CREATION OF MIRROR-LIFE ORGANISMS > CANADIAN STUDY WARNS PERMANENT DAYLIGHT SAVING TIME POSES RISKS TO SLEEP AND MENTAL HEALTH > RISING PS5 JAILBREAKS POSE SIGNIFICANT SECURITY CHALLENGES