Critical Vulnerabilities in VMware Workstation and Fusion

Affected Environment
VMware Workstation and VMware Fusion, versions 25H2 and 26H1, running on any supported host platform.

Threat Overview
Critical integer-overflow and stack-based buffer-overflow vulnerabilities in VMware Workstation and Fusion allow code execution on the host.

Exposure Timeline
Newly disclosed critical vulnerabilities; fixed version 26H1u1 available now, patch before proof-of-concept exploitation emerges.

Attack Surface
VMXNET3 virtual network adapter and HGFS shared folder feature, exploitable by local administrators on guest virtual machines.

Technical Root Cause
Integer overflow in VMXNET3 handling and a stack-based buffer overflow in HGFS both enable host-level code execution.

Exploitation Pathway
Malicious actor with local admin privileges on a VM exploits the adapter or HGFS flaw for host code execution.