CVE-2024-37079CISA KEV
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
CISA lists this Broadcom VMware vCenter Server vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution.
- Product
- VMware vCenter Server
- Added to KEV
- 23 Jan 2026
- Federal remediation due
- 13 Feb 2026
- Known ransomware use
- Not reported