CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

[NEW] [high] VMware Fusion and Workstation: Multiple Vulnerabilities Enable Code Execution

highCVE-2026-59346CVE-2026-59347
A local attacker can exploit multiple vulnerabilities in VMware Workstation and VMware Fusion to execute arbitrary code.

CSIRTS triage

vendor: VMwareproduct: VMware Fusion and WorkstationRemote code execution
What
Multiple vulnerabilities in VMware Workstation and Fusion allow local attackers to execute arbitrary code.
Who is affected
Local users on systems running VMware Workstation or Fusion are affected.
Urgency
High severity; local code execution enables full system compromise of virtualization hosts.
Action
Apply VMware security patches for CVE-2026-59346 and CVE-2026-59347 to all affected workstations and laptops.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch VMware Fusion and Workstation

Get an email when a new VMware Fusion and Workstation advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity
high
Published
2026-09-03
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3169

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-59346coverage & exploitation statusNVD · CVE.org
CVE-2026-59347coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for VMware Fusion and Workstation

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from CERT-Bund (BSI) Security Advisories