{"vulnerability": "CVE-2026-59346", "sightings": [{"uuid": "bb73939f-29e6-4bc3-9cd7-5811ea1fd391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mum4u7nhcr2x", "content": "CVE-2026-59346, a critical VMware Workstation vulnerability, lets an attacker escape a guest VM and execute code on the host. Broadcom rates it 9.3 CVSS.\n\n#VMware #Workstation #Fusion #CVE202659346 #VMXNET3 #Broadcom #InfoSec #PatchNow", "creation_timestamp": "2026-09-03T09:23:29.189671Z"}, {"uuid": "938660b6-2834-4633-862e-77a95e1781b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3munltczhhi2c", "content": "\u306a\u3093\u304b\u3001vmxnet3\u306e\u8106\u5f31\u6027\u3084\u3070\u305d\u3046\n---\nVMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) \n\u2192 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38288", "creation_timestamp": "2026-09-03T23:24:06.198758Z"}, {"uuid": "3593168f-b8ce-4f63-b866-a4a03159fe33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muo6q3hh4s2v", "content": "Daily IT Security Digest \u2014 2026-09-04\nVM-Escape Patches\nBroadcom patched two critical VM-escape vulnerabilities (CVE-2026-59346 and CVE-2026-59347) in VMware Workstation and Fusion that allow attackers with guest admin privileges to escape to the host. Broadcom also released advisories for three", "creation_timestamp": "2026-09-04T05:02:17.039960Z"}, {"uuid": "cb0d4d5e-ba6c-4f4b-a8a6-403fd2bcb81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3muoyd4f4hd2z", "content": "\ud83d\udd17 CVE : CVE-2026-59346, CVE-2026-59347", "creation_timestamp": "2026-09-04T12:40:18.848927Z"}, {"uuid": "c5fe1dbd-24cf-453d-8047-3848932a37c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://t.me/pphm_HackerNews/3008", "content": "\ud83d\udd34 VMware Workstation and Fusion Updates Patch Critical Vulnerability\n\nBroadcom on Thursday announced patches for two critical and high-severity vulnerabilities in VMware Workstation and Fusion.\n\nThe first issue, tracked as CVE-2026-59346 (CVSS score of 9.3), is described as an integer overflow bug leading to arbitrary code execution.\n\n\u201cA malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host,\u201d Broadcom notes in its advisory.", "creation_timestamp": "2026-09-04T19:00:05.375899Z"}, {"uuid": "5f18391a-1cec-4da0-b7ee-104c09eb4858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://t.me/pphm_HackerNews/3008", "content": "\ud83d\udd34 VMware Workstation and Fusion Updates Patch Critical Vulnerability\n\nBroadcom on Thursday announced patches for two critical and high-severity vulnerabilities in VMware Workstation and Fusion.\n\nThe first issue, tracked as CVE-2026-59346 (CVSS score of 9.3), is described as an integer overflow bug leading to arbitrary code execution.\n\n\u201cA malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host,\u201d Broadcom notes in its advisory.", "creation_timestamp": "2026-09-05T01:00:19.952872Z"}, {"uuid": "de388f4f-bb0e-4212-ba2f-153180a3db2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117219342457903644", "content": "\ud83d\udcf0 Broadcom Patches Critical VMware VM Escape Vulnerabilities\nBroadcom patches critical VMware flaws (CVE-2026-59346, CVSS 9.3) in Workstation & Fusion. Vulnerabilities allow VM escape, enabling code execution on the host system. No active exploits known. #VMware #CyberSecurity #Virtualization #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/broadcom-patches-critical-vmware-vm-escape-vulnerabilities/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-05T16:20:24.710882Z"}, {"uuid": "aa2327c7-c252-464a-9374-81067e3baf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3murv42pzjl2i", "content": "Broadcom patches critical VMware flaws (CVE-2026-59346, CVSS 9.3) in Workstation & Fusion. Vulnerabilities allow VM escape, enabling code execution on the host system. No active exploits known. #VMware #CyberSecurity #Virtualization #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-05T16:20:40.935706Z"}, {"uuid": "deef8a5a-95fd-413e-8ec0-319141f35e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mury33xw7i2v", "content": "Broadcom patched two VMware Workstation/Fusion vulnerabilities, including a critical CVE-2026-59346 integer overflow enabling arbitrary code execution on the host with local admin privileges.\n", "creation_timestamp": "2026-09-05T17:13:50.281809Z"}, {"uuid": "1ac48eb1-ab49-4508-8675-d7470a19275b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mury3dhn2t2a", "content": "Broadcom patched two VMware Workstation/Fusion vulnerabilities, including a critical CVE-2026-59346 integer overflow enabling arbitrary code execution on the host with local admin privileges.\n", "creation_timestamp": "2026-09-05T17:13:58.950798Z"}, {"uuid": "836241ec-546f-4fe7-b07a-9ed37713f832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://t.me/thehackernews/9977", "content": "\ud83d\uded1 A critical VMware flaw can turn local VM admin access into host code execution.\n\nBroadcom fixed CVE-2026-59346 and an HGFS flaw in Workstation and Fusion 26H1u1. Both affect 25H2 and 26H1, with no workarounds or known exploitation.\n\nHow the code execution paths work: https://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html", "creation_timestamp": "2026-09-05T18:00:05.301151Z"}, {"uuid": "664b246e-cae3-4952-9b7c-2b059b3b5f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://t.me/pphm_HackerNews/3015", "content": "\ud83d\udd34 Broadcom Patches Critical VMware Workstation and Fusion VM-Escape Vulnerabilities\n\nBroadcom patched two VMware Workstation/Fusion VM-escape bugs. No workarounds exist. Update to version 26H1u1 immediately.\n\nBroadcom published advisory VMSA-2026-0007, patching two vulnerabilities in VMware Workstation and Fusion that allow an attacker inside a virtual machine to execute code on the underlying host. One is rated Critical. Neither has a workaround.\n\nThe first vulnerability, tracked as CVE-2026-59346 (CVSS score of 9.3), is an integer-overflow vulnerability. The issue resides in the VMXNET3, a virtual network adapter (virtual NIC) designed by VMware for virtual machines.", "creation_timestamp": "2026-09-05T18:00:05.395027Z"}, {"uuid": "2386abf3-eb09-486c-ab7a-99547f9e73f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html", "content": "Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions.\n\nThe vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code.\n\n\"A", "creation_timestamp": "2026-09-05T19:00:37.338822Z"}, {"uuid": "8b11052e-23b6-4bf4-a1de-c55bff59d907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3musc7osede2l", "content": "VMware Workstation/Fusion\u306e\u8106\u5f31\u6027(CVE-2026-59346)\u306b\u3088\u308a\u3001\u6a29\u9650\u6607\u683c\u3057\u305f\u30ed\u30fc\u30ab\u30eb\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u53ef\u80fd\u3002", "creation_timestamp": "2026-09-05T20:15:21.404903Z"}, {"uuid": "322bf14c-29bf-4077-942b-b2c6e23af5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "Telegram/Y4RY5TckTSc8jEcD741Tx3x48bPOu6xPsvJUJ4knYrX-KQ", "content": "", "creation_timestamp": "2026-09-05T21:00:05.059166Z"}, {"uuid": "b99cc75d-08b8-4be8-9ad1-010e2124b275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3musnxcvfsd2x", "content": "Broadcom patched VMware Workstation and Fusion flaws, including CVE-2026-59346, a critical 9.3 integer overflow that could let an elevated attacker run code on the host. #VMware #CVE202659346 #Broadcom", "creation_timestamp": "2026-09-05T23:45:25.576507Z"}, {"uuid": "e6c30e54-17d0-49f9-9969-3d5d917efef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "Telegram/Y4RY5TckTSc8jEcD741Tx3x48bPOu6xPsvJUJ4knYrX-KQ", "content": "", "creation_timestamp": "2026-09-06T00:00:15.592022Z"}, {"uuid": "d70edc39-0f1c-41a4-a999-f151381fb8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://t.me/pphm_HackerNews/3015", "content": "\ud83d\udd34 Broadcom Patches Critical VMware Workstation and Fusion VM-Escape Vulnerabilities\n\nBroadcom patched two VMware Workstation/Fusion VM-escape bugs. No workarounds exist. Update to version 26H1u1 immediately.\n\nBroadcom published advisory VMSA-2026-0007, patching two vulnerabilities in VMware Workstation and Fusion that allow an attacker inside a virtual machine to execute code on the underlying host. One is rated Critical. Neither has a workaround.\n\nThe first vulnerability, tracked as CVE-2026-59346 (CVSS score of 9.3), is an integer-overflow vulnerability. The issue resides in the VMXNET3, a virtual network adapter (virtual NIC) designed by VMware for virtual machines.", "creation_timestamp": "2026-09-06T00:00:38.728529Z"}, {"uuid": "45b2e74c-3913-45ba-af16-b12683e6c618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9977", "content": "\ud83d\uded1 A critical VMware flaw can turn local VM admin access into host code execution.\n\nBroadcom fixed CVE-2026-59346 and an HGFS flaw in Workstation and Fusion 26H1u1. Both affect 25H2 and 26H1, with no workarounds or known exploitation.\n\nHow the code execution paths work: https://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html", "creation_timestamp": "2026-09-06T00:00:38.832648Z"}, {"uuid": "d94be653-a645-4356-abb6-ae7c7da535c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3musqomuqt52t", "content": "\ud83e\udd16 CVE-2026-59346 (CVSS 9.3): integer-overflow in VMware Workstation/Fusion lets an elevated local attacker execute arbitrary code on the host OS. Patches available.\n\nhttps://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html", "creation_timestamp": "2026-09-06T00:34:14.368463Z"}, {"uuid": "2a30f6ff-7175-48e5-bd1f-14e8b99873cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html", "content": "Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions.\n\nThe vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code.\n\n\"A", "creation_timestamp": "2026-09-06T01:00:34.390528Z"}, {"uuid": "c320e28e-39ba-468a-82ce-fc4fcbb5c484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59346", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muu4gj3dkb2f", "content": "\ud83d\udccc VMware Patches Critical VM Escape Vulnerability CVE-2026-59346 in Workstation and Fusion https://www.cyberhub.blog/article/31702-vmware-patches-critical-vm-escape-vulnerability-cve-2026-59346-in-workstation-and-fusion", "creation_timestamp": "2026-09-06T13:37:07.559279Z"}, {"uuid": "3a81fa10-dad0-4146-b086-f36970ac0e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3muwfvp5nvt23", "content": "Broadcom patches critical security flaws in VMware Workstation & Fusion, including CVE-2026-59346, a high-severity bug (CVSS 9.3) that allows local attackers to run arbitrary code.", "creation_timestamp": "2026-09-07T11:31:59.551307Z"}, {"uuid": "4aa9004e-5653-464c-814e-022cadd235af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3muwj5nra5a2d", "content": "\ud83d\udce2 [VULN] Une VM pour prendre le contr\u00f4le de votre PC : patchez VMware Workstation et Fusion - CVE-2026-59346 CVE-2026-59347\n\nVous utilisez VMware Workstation Pro ou VMware Fusion ? Passez par la case maintenance.\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "creation_timestamp": "2026-09-07T12:30:07.927480Z"}, {"uuid": "fcc39cc9-bbcb-4469-a97d-502286282038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://gist.github.com/havij13/05393438c5dc85a7d08ef71a8c359374", "content": "", "creation_timestamp": "2026-09-08T06:19:16.057772Z"}]}