poslední zpráva
SPOJENO PŘES CVE EPSS 0.00 (nejvyšší)
Broadcom VMware security advisory (AV26-1008)
Serial number: AV26-1008 Date: October 7, 2026 As of October 7, 2026, VMware is affected by vulnerabilities in the following products: VMware Fusion MacOS Prior to 26H1u1 VMware Workstation Prior to 26H1u1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)…
CVE v události 2
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-59346 | 9.3 3.1 · vmware | – | 0.00 |
| CVE-2026-59347 | 8.1 3.1 · vmware | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.3.
Jak se o tom psalo 4
-
· Cyber Centre Kanada CA nadpis události
Broadcom VMware security advisory (AV26-1008)
Serial number: AV26-1008 Date: October 7, 2026 As of October 7, 2026, VMware is affected by vulnerabilities in the following products: VMware Fusion MacOS Prior to 26H1u1 VMware Workstation Prior to 26H1u1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)…
-
· zachyceno · NCSC-FI FI
VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)
Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 9.3, CVEs: CVE-2026-59346, CVE-2026-59347, Summary: An integer-overflow and a buffer-overflow vulnerabilities in VMware Workstation and Fusion were privately reported to Broadcom. Updates are available to remediate these vulnerabilities in affected Broadcom products. VMXNET3 integer-overflow vulnerability (CVE-2026-59346) CVSSv3.1: 9.3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H A malicious actor with local…
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans les produits VMware (04 septembre 2026)
De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.
-
· CSIRT Itálie (ACN) IT
Risolte vulnerabilità in VMware Workstation e Fusion
Aggiornamenti di sicurezza Broadcom sanano due vulnerabilità, di cui una con gravità "critica" e una con gravità "alta", presenti in VMware Workstation e Fusion. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato, con privilegi amministrativi locali su una macchina virtuale, di eseguire codice arbitrario sui sistemi interessati.