Critical RCE bug in VMware vCenter Server now exploited in attacks
Broadcom confirms active exploitation oftwo VMware vCenter vulnerabilities—a remote code execution flaw due to a heap overflow in the DCE/RPC protocol (CVE-2024-38812) and a privilege escalation flaw (CVE-2024-38813)—urging immediate application of new security patches, especially as the initial fix..