The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter vulnerability patched in July. [...]
KEV ✓ · ransomware EPSS 0.46 CVE-2024-37079 CVE-2025-22225 CVE-2025-60710 CVE-2026-22719 CVE-2026-59310 VMware US
This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-59346.
CVSS 7.5 CVE-2026-59346 VMware US
Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 9.3, CVEs: CVE-2026-59346, CVE-2026-59347, Summary: An integer-overflow and a buffer-overflow vulnerabilities in VMware Workstation and Fusion were privately reported to Broadcom. Updates are available to remediate these vulnerabilities in affected Broadcom products. VMXNET3 integer-overflow vulnerability (CVE-2026-59346) CVSSv3.1: 9.3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H A malicious actor with local…
CVSS 9.3 CVE-2026-59346 CVE-2026-59347 Broadcom VMware FI FR IT
De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
VMware FR