Boletines de Vulnerabilidades

CVE-2026-41702

   
Software afectado VMWARE
 
VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-41702