[HIGH] – VMware Workstation and Fusion Host-Execution Flaws Patched

Key Facts

Broadcom issued an advisory for CVE-2026-59346 and CVE-2026-59347 affecting VMware Workstation and Fusion.

Technical Details

The advisory says a local administrator in a virtual machine could exploit CVE-2026-59346 to execute code on the host. Published coverage reports no known exploitation of these issues.

Impact & Mitigation

Update affected VMware Workstation and Fusion installations to Broadcom’s fixed versions. There are no documented workarounds, so reduce administrative access inside guest VMs until patches are applied.

Sources

• Broadcom advisory
• Threat coverage