Critical VMware Workstation flaw lets VM admins break out to the host

Broadcom has patched a critical VMware Workstation and Fusion vulnerability that can let an attacker with administrator privileges inside a virtual machine execute arbitrary code on the host. Tracked as CVE-2026-59346 and rated CVSS 9.3, the flaw affects VMs using the VMXNET3 virtual network adapter; a separate HGFS bug was fixed at the same time.
Source

👉@sysadminoff

https://4sysops.com/archives/critical-vmware-workstation-flaw-lets-vm-admins-break-out-to-the-host/