importantSYS.SOURCE: The Hacker News• 2026-09-05T21:35:08+05:30

Critical Integer-Overflow Vulnerability in VMware Workstation and Fusion Enables Host Code Execution

#vmware #vulnerability #code execution #security update

A critical integer-overflow vulnerability (CVE-2026-59346, CVSS 9.3) and a stack-based buffer-overflow vulnerability (CVE-2026-59347, CVSS 8.1) in VMware Workstation and Fusion allow privileged attackers to execute host code. Both issues were patched in versions 26H1u1, affecting versions 25H2 and 26H1.

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions.

The vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code.

"A

Read original article

*** END OF TRANSMISSION ***

> ANALYZING THE HISTORICAL ENIGMAS AND EDUCATIONAL INSIGHTS OF THE BAYEUX TAPESTRY > SLED: A SCHEME-LIKE LISP INTERPRETER FOR DOS > 2026 HUGO AWARDS ANNOUNCEMENT AND FINALISTS REVEALED > REFRAMING CREATIVITY WITHIN CONSTRAINTS: THE PENCIL CASE MODEL > CRITIQUE OF AI-GENERATED CONTENT ON LINKEDIN > DECLINE OF LITERACY AND MEDIA CONSUMPTION IN THE DIGITAL AGE > OLIMEX NEO6502KBD: OPEN-SOURCE 6502-BASED ALL-IN-ONE COMPUTER WITH KEYBOARD AND USB-C INTEGRATION > THE SCIENCE BEHIND AGE-RELATED BODY ODOR: 2-NONENAL AND SKIN AGING > SHIFT TO EUPL-1.2: A DEVELOPER'S PERSPECTIVE ON SOFTWARE LICENSING STRATEGY > MIKROTIK ROUTERS EXPLOITED VIA UNAUTHENTICATED SSH EXPOSURE> ANALYZING THE HISTORICAL ENIGMAS AND EDUCATIONAL INSIGHTS OF THE BAYEUX TAPESTRY > SLED: A SCHEME-LIKE LISP INTERPRETER FOR DOS > 2026 HUGO AWARDS ANNOUNCEMENT AND FINALISTS REVEALED > REFRAMING CREATIVITY WITHIN CONSTRAINTS: THE PENCIL CASE MODEL > CRITIQUE OF AI-GENERATED CONTENT ON LINKEDIN > DECLINE OF LITERACY AND MEDIA CONSUMPTION IN THE DIGITAL AGE > OLIMEX NEO6502KBD: OPEN-SOURCE 6502-BASED ALL-IN-ONE COMPUTER WITH KEYBOARD AND USB-C INTEGRATION > THE SCIENCE BEHIND AGE-RELATED BODY ODOR: 2-NONENAL AND SKIN AGING > SHIFT TO EUPL-1.2: A DEVELOPER'S PERSPECTIVE ON SOFTWARE LICENSING STRATEGY > MIKROTIK ROUTERS EXPLOITED VIA UNAUTHENTICATED SSH EXPOSURE