What is GHSA-54rf-87fx-f97x?

GHSA-54rf-87fx-f97x is a security advisory published by GitHub Security Advisories with High severity. VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A...

Which CVE IDs does GHSA-54rf-87fx-f97x cover?

GHSA-54rf-87fx-f97x covers the following CVE IDs: CVE-2026-59347. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-54rf-87fx-f97x?

GHSA-54rf-87fx-f97x has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

GHSA-54rf-87fx-f97xHighCVSS 8.1

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A...

Vendor

GitHub Security Advisories

Published

October 7, 2026

Last Modified

October 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-59347 →

📋 Description

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

Affected versions:

VMware Workstation: 25H2, 26H1 (fixed in 26H1u1)
VMware Fusion: 25H2, 26H1 (fixed in 26H1u1)

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-59347
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/security-advisories/0/38288
https://github.com/advisories/GHSA-54rf-87fx-f97x