> TritonInfoSec News
Home / Sep 06, 2026 / Story
0
#4 The Hacker News general September 05, 2026 at 16:05 UTC

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

By [email protected] (The Hacker News)

AI Summary

Broadcom patched CVE-2026-59346 (CVSS 9.3), a critical integer-overflow vulnerability in VMware Workstation and Fusion that allows a local attacker with elevated VM privileges to execute arbitrary code on the host system. Organizations using these hypervisors should apply the security updates immediately to prevent VM escape scenarios.

Read full article → https://thehackernews.com/2026/09/critical-vmware-…

Relevance score: 84.0/100

# More from September 06

  1. 1
    Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores The Hacker News
  2. 2
    Google warns of new Chrome zero-day flaw exploited in attacks BleepingComputer
  3. 3
    Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials The Hacker News
  4. 5
    Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities The Hacker News
  5. 6
    Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel The Hacker News
  6. 7
    39 New Methods That Compromise Passkey Authentication BleepingComputer
  7. 8
    Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain BleepingComputer
  8. 9
    Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites SecurityWeek
  9. 10
    US offers $10 million for info on Iranian allegedly behind cyberattacks on critical infrastructure The Record