Exploitation of Critical VMware vCenter Server Bug CVE-2024-37079

Exploitation of Critical VMware vCenter Server Bug CVE-2024-37079

First seen 24 Jan 2026, 01:36 UTC •Theregister •48.8

Article Content

Browse articles
ThreatCluster

A critical vulnerability in VMware vCenter Server, tracked as CVE-2024-37079, is being actively exploited more than a year after Broadcom issued a patch. This out-of-bounds write flaw in the DCERPC protocol has a CVSS rating of 9.8, indicating a severe security risk for affected systems. Organizations using vCenter Server are urged to ensure their software is updated to mitigate this threat.

How this analysis works

Extracted Entities

1 / 2