cve-2022-31705

CVE-2022-31705 소개 https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Windows VMware Workstation 16.2.0에서 테스트, 게스트 OS는 Ubuntu Server 22 게스트 머신에 USB 장치가 하나 이상 연결되어 있어야 함 ehci.c 코드에서 'qh-field4' 변경 'sudo ./run.sh'를 입력하여 poc를 컴파일하고 실행 예제...

CVE-2026-59346-POC

CVE-2026-59346 — VMXNET3 TSO 整数オーバーフロー VMware Workstation / Fusion vmware-vmx 内の VMXNET3 仮想 NIC の TSO セグメンテーションパスにおける 32 ビット整数オーバーフローの概念実証 PoC であり、ゲスト VM から到達可能です。 この問題は修正済みです。 この PoC は研究および防御目的のみで公開されています。ホスト側のクラッシュ SIGSEGV を引き起こすものであり、コード実行を試みるものではありません。 | ---|--- CVE| CVE-2026-59346 Writeup|...

CVE-2026-59347

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware...

CVE-2026-59346

VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Affected versions: - VMware Workstation: 25H2, 26H1 fixed i...

EUVD-2026-94169

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware...

CVE-2026-59347

VMware Workstation and VMware Fusion are affected by a stack-based buffer-overflow vulnerability in the HGFS component. A malicious actor with local administrative privileges on a virtual machine can exploit this issue to execute arbitrary code as the virtual machine's VMX process running on the ...

CVE-2026-59347 VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware...

CVE-2026-59347 VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware...

EUVD-2026-94168

VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Affected versions: - VMware Workstation: 25H2, 26H1 fixed i...

CVE-2026-59346 VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability

VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Affected versions: - VMware Workstation: 25H2, 26H1 fixed i...

CVE-2026-59346 VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability

VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Affected versions: - VMware Workstation: 25H2, 26H1 fixed i...

CVE-2026-59346

VMware Workstation and Fusion are vulnerable to an integer-overflow flaw within the VMXNET3 virtual network adapter's TSO segmentation path in vmware-vmx. The vulnerability occurs because the routine calculates allocation sizes using a 32-bit imul operation; if the product exceeds 2^32, the resul...

network-security-lab

🔬 네트워크 보안 랩 실제 공격 및 방어 시나리오를 시뮬레이션하는 통제된 가상 환경 📋 개요 이 랩은 완전히 격리된 가상 환경에서 실제 침투 테스트 및 방어 강화 연습을 시뮬레이션합니다. 정찰부터 익스플로잇까지의 전체 공격 보안 수명 주기와 각 위험을 완화할 방어 제어를 보여줍니다. 주요 결과: 자격 증명이나 특별한 도구 없이 알려진 백도어를 이용하여 60초 이내에 대상 머신에서 전체 루트 액세스 권한을 획득했습니다. 🏗 랩 환경 구성 요소| 세부 사항 ---|--- Hypervisor| VMware Workstation...

metasploitable-penetration-testing-lab

🔐 Metasploitable 2 침투 테스트 연구실 격리된 가상 환경에서 취약점 발견, 익스플로잇, 사후 익스플로잇 검증, 방어적 완화를 보여주는 통제된 사이버보안 연구실 프로젝트입니다. 📌 프로젝트 개요 이 프로젝트는 통제된 가상 연구실에서 수행된 실제 침투 테스트 업무를 시뮬레이션합니다. 목표는 취약한 시스템의 노출된 서비스를 식별하고, 중요 취약점을 탐지하며, 통제된 익스플로잇을 수행하고, 시스템 장악을 검증하며, 완화 전략을 구현하는 것이었습니다. 이 프로젝트는 공격 및 방어 사이버보안 역량을 모두 보여줍니다. 🏗 실...

vmware-exploitation

VMware エクスプロイテーション VMware エスケープエクスプロイトに関連するリンク集です。 プルリクエストは歓迎します。 更新情報を受け取るには、Twitter で @andreyknvl を、Mastodon で @[email protected] をフォローしてください。 研究 2024 "N-day を連鎖させて全てを侵害する": "Part 4 — VMware Workstation 情報漏洩", "Part 5 — VMware Workstation ゲストからホストへのエスケープ" 記事 "仮想化の亀裂を暴き、ホストシステムを掌握する — VMwar...

VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

Exploit for CVE-2026-59346

CVE-2026-59346 Donate Help maintain this p...

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions. The vulnerability, tracked as CVE-2026-59346 CVSS score: 9.3, is an integer-overflow...

VMware Workstation 25H2, 26H1.x < 26H1u1 Multiple Vulnerabilities (VMSA-2026-0007)

The version of VMware Workstation installed on the remote host is 25H2, 26H1.x prior to 26H1u1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...

PT-2026-85032

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1 Description A stack-based buffer-overflow exists in HGFS. A malicious actor with local administrative privileges on a virtual machine can exploit this to...