Broadcom Patches Critical VMware Workstation and Fusion Flaws That Let VM Admins Reach the Host

Broadcom Patches Critical VMware Workstation and Fusion Flaws That Let VM Admins Reach the Host

Broadcom moved quickly this week to close two serious holes in its desktop virtualization lineup. The patches target VMware Workstation and Fusion. One flaw carries a CVSS score of 9.3. The other scores 8.1. Both allow an attacker who already holds local administrator rights inside a virtual machine to execute code on the underlying host system. Security teams running these products on Windows, Linux or macOS now face a clear choice. Update imme…

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware - National Cyber Security Consulting

Ravie LakshmananSep 05, 2026Vulnerability / Server Security Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions. The vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can […] Thank you for subscribing to …

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions. The vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code. "A

Broadcom Patches Critical VMware Workstation and Fusion VM-Escape Vulnerabilities

Broadcom patched two VMware Workstation/Fusion VM-escape bugs. No workarounds exist. Update to version 26H1u1 immediately. Broadcom published advisory… Read more →