Patch Critical VMware vCenter Flaw Now Under Active Attack
CISA has ordered federal agencies to patch a critical, actively exploited VMware vCenter Server vulnerability (CVE-2024-37079) by February 13. Broadcom confirmed the heap overflow flaw allows remote code execution and has no workarounds, necessitating immediate updates.