{"uuid": "664b246e-cae3-4952-9b7c-2b059b3b5f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://t.me/pphm_HackerNews/3015", "content": "\ud83d\udd34 Broadcom Patches Critical VMware Workstation and Fusion VM-Escape Vulnerabilities\n\nBroadcom patched two VMware Workstation/Fusion VM-escape bugs. No workarounds exist. Update to version 26H1u1 immediately.\n\nBroadcom published advisory VMSA-2026-0007, patching two vulnerabilities in VMware Workstation and Fusion that allow an attacker inside a virtual machine to execute code on the underlying host. One is rated Critical. Neither has a workaround.\n\nThe first vulnerability, tracked as CVE-2026-59346 (CVSS score of 9.3), is an integer-overflow vulnerability. The issue resides in the VMXNET3, a virtual network adapter (virtual NIC) designed by VMware for virtual machines.", "creation_timestamp": "2026-09-05T18:00:05.395027Z"}