Our takeBroadcom's latest VMware advisory covers Fusion and Workstation prior to 26H1u1. Update immediately if you run either: a hypervisor flaw reaches every VM on the host.Cyber Resilience desk
Sources (1)
- cccs · cccs
What this means for you — Security leader:Update VMware Fusion and Workstation to 26H1u1 or later. These are client hypervisors; compromise lets an attacker reach every guest and the host itself.
What this means for you — Lean IT orgs:If you run VMware Fusion or Workstation on Macs or Windows PCs, update both to version 26H1u1 right away. The update is free and takes a few minutes.
What this means for you — MSP:Check every client for VMware Fusion or Workstation installs and push the 26H1u1 update. Prioritize any machine used for testing or running untrusted workloads.
What this means for you — Researcher:Broadcom released VMSA-2026-0007 covering pre-26H1u1 versions of VMware Fusion and Workstation. Review the CCCS advisory for exact CVE mappings once published.