ACTIVELY EXPLOITED
CVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerability
| Vendor | VMware |
|---|---|
| Product | vCenter Server |
| Actively exploited | Yes |
| Added to CISA KEV | 20 Nov 2024 |
| CISA federal deadline | 11 Dec 2024 |
| Weakness (CWE) | CWE-250, CWE-273 |
Required action (CISA's text)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description (NVD)
VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet.
SOURCES
Other VMware flaws
- CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
- CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability
- CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
- CVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
- CVE-2024-37085: VMware ESXi Authentication Bypass Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.