Critical VM-Escape Vulnerability Found in VMware Workstation and Fusion

Broadcom has issued a critical security advisory regarding two serious flaws in VMware Workstation and Fusion, including an integer-overflow vulnerability (CVE-2026-59346) with a CVSS score of 9.3. This flaw in the VMXNET3 network adapter could allow a local administrator within a virtual machine to execute arbitrary code on the host operating system. Users are urged to upgrade immediately as no workaround is available, posing a significant risk to virtualized environments.