Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2024-38812

The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

CVSS 9.8 · CriticalBuzz score 69.5KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 69.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 30.0 · diversity 14.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
30.0
19 evidence mentions in the snapshot
Diversity score
14.5
5 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
19 source links · newest first
  • U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalogSecurity Affairs

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw impacting Broadcom VMware vCenter to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Broadcom VMware vCenter Server vulnerability, tracked as CVE-2024-37079 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. vCenter Server is a centralized management platform developed […]

    newssecurityaffairs.comJan 24, 2026, 10:23 AM
  • US Organizations Warned of Chinese Malware Used for Long-Term PersistenceSecurityWeek

    Warp Panda has been using the BrickStorm, Junction, and GuestConduit malware in attacks against US organizations.

    newswww.securityweek.comDec 5, 2025, 2:15 PM
  • CISA, FBI call software with buffer overflow issues ‘unforgivable’CSO Online

    FBI and CISA have issued a joint advisory to warn software developers against building codes with Buffer Overflow vulnerabilities in them, calling them “unforgivable” mistakes. Tagging the advisory as part of their ongoing “Secure by Design” efforts, the authorities said these vulnerabilities are prevalent in software, including vendors like Microsoft, VMware, and Ivanti, that lead […]

    newswww.csoonline.comFeb 13, 2025, 12:08 PM
  • Recently disclosed VMware vCenter Server bugs are actively exploited in attacksSecurity Affairs

    Threat actors are actively exploiting two VMware vCenter Server vulnerabilities tracked as CVE-2024-38812 and CVE-2024-38813, Broadcom warns. Broadcom warns that the two VMware vCenter Server vulnerabilities CVE-2024-38812 and CVE-2024-38813 are actively exploited in the wild. “Updated advisory to note that VMware by Broadcom confirmed that exploitation has occurred in the wild for CVE-2024-38812 and CVE-2024-38813.” […]

    newssecurityaffairs.comNov 18, 2024, 8:42 PM
  • VMware Discloses Exploitation of Hard-to-Fix vCenter Server FlawSecurityWeek

    The saga of VMWare’s critical CVE-2024-38812 vCenter Server bug has reached the “exploitation detected” stage.

    newswww.securityweek.comNov 18, 2024, 6:24 PM
  • 28th October – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 28th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Grupo Aeroportuario del Centro Norte (OMA), operator of 13 airports across Mexico, was hacked by the RansomHub ransomware gang, who threatened to leak 3TB of stolen data unless a ransom is paid. […]

    vendorresearch.checkpoint.comOct 28, 2024, 1:54 PM
  • Security Affairs newsletter Round 495 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Chinese cyber spies targeted phones used by Trump and Vance Irish Data Protection Commission fined LinkedIn €310M for […]

    newssecurityaffairs.comOct 27, 2024, 1:30 PM
  • Week in review: Fortinet patches critical FortiManager 0-day, VMware fixes vCenter Server RCEHelp Net Security

    Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Fortinet releases patches for publicly undisclosed critical FortiManager vulnerability In the last couple of days, Fortinet has released critical security updates for FortiManager, to fix a critical vulnerability that is reportedly being exploited by Chinese threat actors. VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812) Broadcom has released new patches for previously fixed vulnerabilities (CVE-2024-38812, CVE-2024-38813) in vCenter … More →

    newswww.helpnetsecurity.comOct 27, 2024, 9:00 AM
  • VMware patches security vulnerability twiceCSO Online

    Mistakes can occur, but when the same problem occurs several times in a row, there may be a deeper problem. This is the case with VMware that had to publish a patch for the same security time for the second time in just a few months. Heap overflow found in VMware vCenter This patch is […]

    newswww.csoonline.comOct 23, 2024, 11:44 PM
  • VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812)Help Net Security

    Broadcom has released new patches for previously fixed vulnerabilities (CVE-2024-38812, CVE-2024-38813) in vCenter Server, one of which hasn’t been fully addressed the first time and could allow attackers to achieve remote code execution. The vulnerabilities were privately reported by zbl & srs of team TZL – researchers who participated in the 2024 Matrix Cup in June 2024. Broadcom maintains that they are not currently aware of exploitation “in the wild.” CVE-2024-38812 and CVE-2024-38813 VMware vCenter … More →

    newswww.helpnetsecurity.comOct 22, 2024, 11:00 AM
  • VMware failed to fully address vCenter Server RCE flaw CVE-2024-38812Security Affairs

    VMware addressed a remote code execution flaw, demonstrated in a Chinese hacking contest, for the second time in two months. VMware failed to fully address a remote code execution flaw, tracked as CVE-2024-38812 (CVSS score: 9.8), in its vCenter Server platform. In September, Broadcom released security updates to the vulnerability CVE-2024-38812. vCenter Server is a […]

    newssecurityaffairs.comOct 22, 2024, 7:30 AM
  • VMware Struggles to Fix Flaw Exploited at Chinese Hacking ContestSecurityWeek

    For the second time in as many months, VMware patches a remote code execution vulnerability first exploited at a Chinese hacking contest in June.

    newswww.securityweek.comOct 21, 2024, 7:15 PM
  • Security Affairs newsletter Round 491 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Hackers stole over $44 million from Asian crypto platform BingX OP KAERB: Europol dismantled phishing scheme targeting mobile […]

    newssecurityaffairs.comSep 29, 2024, 1:08 PM
  • 23rd September – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 23rd September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Medusa ransomware gang has claimed responsibility for an attack on the Providence Public School District (PPSD) in Rhode Island. The school district is still grappling with ongoing internet outages since September 11, […]

    vendorresearch.checkpoint.comSep 23, 2024, 12:01 PM
  • Security Affairs newsletter Round 490 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Hackers stole over $44 million from Asian crypto platform BingX OP KAERB: Europol dismantled phishing scheme targeting mobile […]

    newssecurityaffairs.comSep 22, 2024, 1:37 PM
  • Week in review: Critical VMware vCenter Server bugs fixed, Apple releases iOS 18Help Net Security

    Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Critical VMware vCenter Server bugs fixed (CVE-2024-38812) Broadcom has released fixes for two vulnerabilities affecting VMware vCenter Server that can be triggered by sending a specially crafted network packet, and could lead to remote code execution (CVE-2024-38812) or privilege escalation (CVE-2024-38813). Apple releases iOS 18, with security and privacy improvements Apple has launched iOS 18, the latest significant iteration of … More →

    newswww.helpnetsecurity.comSep 22, 2024, 8:00 AM
  • Critical VMware vCenter Server bugs fixed (CVE-2024-38812)Help Net Security

    Broadcom has released fixes for two vulnerabilities affecting VMware vCenter Server that can be triggered by sending a specially crafted network packet, and could lead to remote code execution (CVE-2024-38812) or privilege escalation (CVE-2024-38813). “Broadcom is not currently aware of exploitation ‘in the wild’,” the company says, but noted that organizations should promptly act to install one of the updated versions. VMware has patched a similarly critical RCE flaw (CVE-2023-34048) in vCenter Server in October … More →

    newswww.helpnetsecurity.comSep 18, 2024, 10:38 AM
  • Broadcom fixed Critical VMware vCenter Server flaw CVE-2024-38812Security Affairs

    Broadcom addressed a critical vulnerability in the VMware vCenter Server that could allow remote attackers to achieve code execution. Broadcom released security updates to address a critical vulnerability, tracked as CVE-2024-38812 (CVSS score: 9.8), in VMware vCenter Server that could lead to remote code execution. vCenter Server is a critical component in VMware virtualization and […]

    newssecurityaffairs.comSep 18, 2024, 7:41 AM
  • VMware Patches Remote Code Execution Flaw Found in Chinese Hacking ContestSecurityWeek

    VMware warned that an attacker with network access could send a specially crafted packet to execute remote code. CVSS severity score 9.8/10.

    newswww.securityweek.comSep 17, 2024, 5:56 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence