Index

Search

Search the public record. Drafts and scheduled notes are not included.

news

VMware VMXNET3 guest-to-host overflow is CVE-2026-59346

VMSA-2026-0007 rates CVE-2026-59346 CVSS 9.3: a guest administrator with a VMXNET3 adapter on Workstation or Fusion 25H2/26H1 may execute code on the host. Fixed in 26H1u1. A public PoC demonstrates a host crash. Not in CISA KEV. CVE-2026-59347 is a separate HGFS issue in the same advisory.

Published 3h ago

CriticalPoC Available

CVE-2026-59346

VMware Workstation/Fusion VMXNET3 integer overflow guest-to-host

RCE

Published 11h ago