CVE-2024-38813
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
3/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet.
CISA Known Exploited Vulnerability
Vendor / Product
VMware — vCenter Server
Date Added
2024-11-20
Remediation Due
2024-12-11
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968 ; https://nvd.nist.gov/vuln/detail/CVE-2024-38813