VMware patches serious flaws in vCenter Server
Briefly

Broadcom has issued critical patches for two vulnerabilities in VMware vCenter Server that could allow attackers to fully compromise systems over the network.
The first vulnerability, CVE-2024-38812, is a critical heap overflow flaw with a CVSS score of 9.8, potentially allowing remote code execution.
The second flaw, CVE-2024-38813, is a privilege escalation vulnerability rated at a CVSS score of 7.5, enabling attackers to gain administrative control.
Both vulnerabilities were discovered during the Matrix Cup Cyber Security Competition in China, highlighting the role of ethical hacking in enhancing software security.
Read at Theregister
[
]
[
|
]