# Broadcom patches VMware desktop VM-escape flaws

_Published Thursday, September 3, 2026 at 1:20 PM EDT · Security, Infrastructure · Latest · Tier 1 — Major_

![Broadcom patches VMware desktop VM-escape flaws — Primary](https://cybersecuritynews.com/wp-content/uploads/2026/09/VMware-Workstation-and-Fusion-Vulnerabilities.webp)

Broadcom issued version 26H1u1 for VMware Workstation and Fusion to address two reported vulnerabilities that can let an attacker execute code on a host from a guest virtual machine. CVE-2026-59346 affects the VMXNET3 adapter and carries a 9.3 CVSSv3 score; CVE-2026-59347 affects shared-folder handling and is rated 8.1. The flaws affect Workstation and Fusion versions 25H2 and 26H1. The report says no configuration workaround is available.

## Sources

- [cybersecuritynews.com](https://cybersecuritynews.com/vmware-workstation-and-fusion-vulnerabilities/)
- [The Hacker News](https://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html)

---
Canonical: https://techandbusiness.org/newswire/jtjrlborp9zxMgXili7RW9
Published: 2026-09-03T17:20:37.843Z
Story chronology: 2026-09-03T11:31:58.000Z
Retrieved: 2026-10-18T22:01:30.074Z
Publisher: Tech & Business (techandbusiness.org)
