Skip to content
Exploitation of Critical VMware vCenter Server Bug CVE-2024-37079

Exploitation of Critical VMware vCenter Server Bug CVE-2024-37079

First seen 24 Jan 2026, 01:36 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A critical vulnerability in VMware vCenter Server, tracked as CVE-2024-37079, is being actively exploited more than a year after Broadcom issued a patch. This out-of-bounds write flaw in the DCERPC protocol has a CVSS rating of 9.8, indicating a severe security risk for affected systems. Organizations using vCenter Server are urged to ensure their software is updated to mitigate this threat.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 218d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track UNC3886, Broadcom and CVE-2023-34048 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed