CVE-2026-59346: ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability

2 karet z 5 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-59346

EPSS 0.00 EPSS k 18. 10. 2026

Hodnocení závažnosti

9.3 CVSS 3.1 vmware

útok z místního přístupu bez přípravy bez přihlášení bez zásahu uživatele
dopad plný únik dat úplná změna dat úplný výpadek
přesah dopad i mimo zranitelnou součást

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

SPOJENO PŘES CVE Broadcom VMware security advisory (AV26-1008)

Serial number: AV26-1008 Date: October 7, 2026 As of October 7, 2026, VMware is affected by vulnerabilities in the following products: VMware Fusion MacOS Prior to 26H1u1 VMware Workstation Prior to 26H1u1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)…

EPSS 0.00 CVSS 9.3 CVE-2026-59346 CVE-2026-59347 Broadcom VMware CA FI FR IT

tg: zranitelnost

· Cyber Centre Kanada · Broadcom VMware security advisory (AV26-1008) · zachyceno · NCSC-FI · VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) · zachyceno · CERT-FR – avis · Multiples vulnérabilités dans les produits VMware (04 septembre 2026) · CSIRT Itálie (ACN) · Risolte vulnerabilità in VMware Workstation e Fusion

· zachyceno

ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-59346.

EPSS 0.00 CVSS 7.5 CVE-2026-59346 VMware US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability