Critical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion

Broadcom has released urgent security updates to fix a critical integer overflow vulnerability (CVE-2026-59346) in VMware Workstation and Fusion. This flaw, which has a CVSS score of 9.3, resides in the VMXNET3 virtual network adapter. An attacker with local administrative privileges on the virtual machine can exploit this flaw to execute arbitrary code on the underlying host system. No temporary workarounds are available, so Broadcom urges users to update immediately to version 26H1u1.

Source: The Hacker News