ZDI-CAN-31013: ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-59346.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need before exploiting this issue?
The attacker must already be able to execute high-privileged code on the target guest system. This is therefore a post-compromise privilege-escalation issue rather than an unauthenticated remote entry point.
Where does the privilege escalation occur?
The vulnerability affects VMware Workstation's VMXNET3 TSO segmentation handling and allows a local attacker to escalate privileges on an affected installation. The provided information identifies the required starting position as high-privileged code execution in the guest system.