Skip to content
Sign in

VMware product

Workstation

Alert
No Workstation CVE is in the CISA KEV catalogue.

Tracked since 3 Sep · latest article 8 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date

No Workstation CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds Workstation CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a Workstation CVE to KEV.

Fix listed

2 of 2 CVEs in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-59346: 34.9th percentileCVE-2026-59347: 14.3th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-5934634.9
CVE-2026-5934714.3

Coverage5 articles · all time

The latest 5 articles naming Workstation, in the shared story grammar.

Full timeline
Quiet for 3 weekslast report 8 Oct5 articles4 outlets

5 articles from 4 outlets since 3 Sep. Quiet since 8 Oct.

Now3 Sep4568 OctFirst reportSecurityOnline · 3 Sep, 10:35Picked up againafter 5 weeks quiet
  • Thu 3 Sep, 10:35 UTC. SecurityOnline, first report. CVE-2026-59346 (CVSS 9.3): VMware Flaw Allows Runnin Code on the Host.
  • Fri 4 Sep, 12:11 UTC. SecurityWeek, its first report on the story. Broadcom Patches Critical VMware Flaws Enabling Host Code Execution.
  • Sat 5 Sep, 05:59 UTC. Security Affairs, its first report on the story. VMware Fixes Critical Flaws Allowing Guest Code Execution on Hosts.
  • Sat 5 Sep, 17:01 UTC. The Hacker News, its first report on the story. Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution.
  • Thu 8 Oct, 03:26 UTC. SecurityOnline. VMware Patches Critical VM Escape Flaw After Public PoC Release.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 5 articles as a list
  1. Thu 3 SepDay 01
    1. CVE-2026-59346 (CVSS 9.3): VMware Flaw Allows Runnin Code on the Host10:35 · SecurityOnline · First report
  2. Fri 4 SepDay 11
    1. Broadcom Patches Critical VMware Flaws Enabling Host Code Execution12:11 · SecurityWeek
  3. Sat 5 SepDay 22
    1. VMware Fixes Critical Flaws Allowing Guest Code Execution on Hosts05:59 · Security Affairs
    2. Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution17:01 · The Hacker News

  4. Quiet for 5 weeks

    Thu 8 OctDay 351
    1. VMware Patches Critical VM Escape Flaw After Public PoC Release03:26 · SecurityOnline · Picked up again

All CVEs in coverage2

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-59346

    VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability

    Critical0.4% EPSS · 5 articles
  • CVE-2026-59347

    VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability

    High0.2% EPSS · 4 articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in