Stack-Based Buffer Overflow Vulnerability in VMware Workstation and Fusion

CVE-2026-59347

What is CVE-2026-59347?

A stack-based buffer overflow vulnerability exists in VMware Workstation and Fusion due to improper handling of HGFS. This flaw could potentially allow a malicious actor with local administrative privileges on a virtual machine to exploit the vulnerability, leading to the execution of arbitrary code in the virtual machine's VMX process operating on the host system. Proper updates and security patches are necessary to mitigate this risk and protect your systems.

References