CVE-2026-59347 | BDVDB-2026-384124 Detail
VMwareVMware Workstation
Description#
VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware Workstation: 25H2, 26H1 (fixed in 26H1u1) - VMware Fusion: 25H2, 26H1 (fixed in 26H1u1)
Impact#
A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Weaknesses#
- CWE-121 Stack-based Buffer Overflow
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.