Exploitation of Critical VMware vCenter Server Bug CVE-2024-37079

Exploitation of Critical VMware vCenter Server Bug CVE-2024-37079

First seen 24 Jan 2026, 01:36 UTC Theregister 97% similarity 48.8

Article Content

Browse articles
ThreatCluster

A critical vulnerability in VMware vCenter Server, tracked as CVE-2024-37079, is being actively exploited more than a year after Broadcom issued a patch. This out-of-bounds write flaw in the DCERPC protocol has a CVSS rating of 9.8, indicating a severe security risk for affected systems. Organizations using vCenter Server are urged to ensure their software is updated to mitigate this threat.

ThreatCluster AI

Community

Browse all →