importantSYS.SOURCE: The Hacker News• 2026-09-05T21:35:08+05:30

Critical Integer-Overflow Vulnerability in VMware Workstation and Fusion Enables Host Code Execution

#vmware #vulnerability #code-execution #security-update

A critical integer-overflow vulnerability (CVE-2026-59346, CVSS 9.3) and a stack-based buffer-overflow vulnerability (CVE-2026-59347, CVSS 8.1) in VMware Workstation and Fusion enable host code execution when exploited by attackers with local administrative privileges on virtual machines. Both flaws have been patched in versions 26H1u1, but no workarounds exist and previous VMware vulnerabilities have been actively exploited in the wild.

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions.

The vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code.

"A

Read original article

*** END OF TRANSMISSION ***

> OPENAI ACKNOWLEDGES WIKI INCIDENT AND DEVELOPS DISCLOSURE FRAMEWORK > REFLECTIONS ON ESSENTIAL LIFE VALUES: TIME, HEALTH, AND CONNECTION > CLUCKY ALARM APP UTILIZES ROOSTER SOUNDS AND CHALLENGES TO ENHANCE WAKE-UP EXPERIENCE > UNPATCHED TEAMCITY VULNERABILITY LEADS TO AWS CREDENTIAL THEFT IN JETBRAINS CADENCE BREACH > OCAML PROGRAMMING BOOK BY SYLVAIN CONCHON AND JEAN-CHRISTOPHE FILLIÂTRE > TOBACCO INDUSTRY'S ROLE IN THE EXPANSION OF ULTRA-PROCESSED FOODS > WIKIMEDIA FOUNDATION U.S. STAFF VOTE TO UNIONIZE WITH CWA LOCAL 9415 > CRITICAL INTEGER-OVERFLOW VULNERABILITY IN VMWARE WORKSTATION AND FUSION ENABLES HOST CODE EXECUTION > OURA'S PUBLIC OFFERING AND RISING COMPETITION IN THE SMART RING MARKET > 3M'S CONCEALMENT OF PFAS TOXICITY AND ENVIRONMENTAL IMPACT> OPENAI ACKNOWLEDGES WIKI INCIDENT AND DEVELOPS DISCLOSURE FRAMEWORK > REFLECTIONS ON ESSENTIAL LIFE VALUES: TIME, HEALTH, AND CONNECTION > CLUCKY ALARM APP UTILIZES ROOSTER SOUNDS AND CHALLENGES TO ENHANCE WAKE-UP EXPERIENCE > UNPATCHED TEAMCITY VULNERABILITY LEADS TO AWS CREDENTIAL THEFT IN JETBRAINS CADENCE BREACH > OCAML PROGRAMMING BOOK BY SYLVAIN CONCHON AND JEAN-CHRISTOPHE FILLIÂTRE > TOBACCO INDUSTRY'S ROLE IN THE EXPANSION OF ULTRA-PROCESSED FOODS > WIKIMEDIA FOUNDATION U.S. STAFF VOTE TO UNIONIZE WITH CWA LOCAL 9415 > CRITICAL INTEGER-OVERFLOW VULNERABILITY IN VMWARE WORKSTATION AND FUSION ENABLES HOST CODE EXECUTION > OURA'S PUBLIC OFFERING AND RISING COMPETITION IN THE SMART RING MARKET > 3M'S CONCEALMENT OF PFAS TOXICITY AND ENVIRONMENTAL IMPACT