VMware Fusion vulnerabilities

2 CVEs affecting VMware Fusion, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-59347, published 2026-10-07.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-59346, published 2026-10-07. Critical severity, CVSS 9.3. EPSS: 0.3% chance of exploitation in the next 30 days. VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit…
• CVE-2026-59347, published 2026-10-07. High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days. VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to…