VMware vCenter Server CVSS 9.8 DCERPC heap overflow (CVE-2024-37079) allows unauthenticated remote code execution. In CISA’s KEV catalog, no workaround. Affected versions table (7.0/8.0), VAMI-based patch steps, exploitation detection, and preventive recommendations.