A critical vulnerability (CVE-2024-37079) in VMware vCenter Server is being actively exploited, over a year after Broadcom released a patch in June 2024. The flaw, rated 9.8/10 CVSS, is an out-of-bounds write bug in the DCERPC protocol implementation that allows remote code execution via specially crafted network packets. CISA
Sort: