CVE-2026-41702
HIGH
NVD
CVSS Score
7.8
Severity
HIGH
Published
May 15, 2026
Vendor
unknown
Description
VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed.