8.1

CVE-2026-59347

VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

Affected versions:
- VMware Workstation: 25H2, 26H1 (fixed in 26H1u1)
- VMware Fusion: 25H2, 26H1 (fixed in 26H1u1)
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerVMware
≫
Produkt VMware Workstation
Default Statusunaffected
Version <= 26H1
Version 25H2
Status affected
Version 26H1u1
Status unaffected
HerstellerVMware
≫
Produkt VMware Fusion
Default Statusunaffected
Version <= 26H1
Version 25H2
Status affected
Version 26H1u1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.099
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
VMware 8.1 1.4 6
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/security-advisories/0/38288